Jetty 6.1.6 Cross Site Scripting Vulnerability

Exploit for jsp platform in category web applications Title: Jetty 6.1.6 Cross-Site Scripting Author: email protected - https://crowdshield Software Link: http://www.mortbay.org/jetty/ Tested on: Jetty 6.1.6 other versions may also be vulnerable CVE: N/A Background: Jetty 6.1.6 is vulnerable to...

Jetty 6.1.6 Cross Site Scripting

Title: Jetty 6.1.6 Cross-Site Scripting Date: 8/14/2018 Author: 1N3@CrowdShield - https://crowdshield Software Link: http://www.mortbay.org/jetty/ Tested on: Jetty 6.1.6 other versions may also be vulnerable CVE: N/A Background: Jetty 6.1.6 is vulnerable to Cross-Site Scripting XSS which allows a...

Mortbay Jetty vulnerable to HTTP response splitting

Overview Mortbay Jetty is vulnerable to HTTP response splitting, which may allow a remote, unauthenticated attacker to inject various HTTP headers Description Mortbay Jetty is a web server that is written in Java. Jetty fails to properly handle HTTP headers with CRLF sequences, which can allow an...