Design/Logic Flaw

JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...

CVE-2009-5046: Improper Neutralization of Input During Web Page Generation

JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...

PT-2019-6516

Name of the Vulnerable Software and Affected Versions jetty versions prior to 6.1.22 Description The issue concerns a JSP Dump and Session Dump Servlet XSS in jetty. Recommendations For versions prior to 6.1.22, update to version 6.1.22 or later to resolve the issue...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to jsp/dump.jsp in the JSP Dump feature, or the 2 Name or 3 Value parameter to the default URI for the Session Dump Servlet under...

CVE-2009-4610

Multiple cross-site scripting XSS vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to jsp/dump.jsp in the JSP Dump feature, or the 2 Name or 3 Value parameter to the default URI for the Session Dump Servlet under...

CVE-2009-4610: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to jsp/dump.jsp in the JSP Dump feature, or the 2 Name or 3 Value parameter to the default URI for the Session Dump Servlet under...