Jetty Security Vulnerabilities and Issues — Jetty CVE List

Lucene search

MortbayJetty

3 matches found

CVE•added 2009/05/05 5:30 p.m.•143 views

CVE-2009-1523

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

5CVSS5.2AI score0.27952EPSS

CVE•added 2009/05/05 5:30 p.m.•91 views

CVE-2009-1524

Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.

4.3CVSS4.9AI score0.00798EPSS

CVE•added 2009/10/07 5:30 p.m.•48 views

CVE-2009-3579

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

4.3CVSS5.6AI score0.00236EPSS