Lucene search
Ubuntu.comUB:CVE-2009-4610HistoryJan 13, 2010 - 12:00 a.m.
CVE-2009-4610
2010-01-1300:00:00
ubuntu.com
ubuntu.com
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
45.4%
Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x
and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via
(1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2)
Name or (3) Value parameter to the default URI for the Session Dump Servlet
under session/.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | we don’t ship the test application containing the Dump servlet |
Related
prion
prion
Cross site scripting
2010-01-13 20:30:00
cvelist
cvelist
CVE-2009-4610
2022-10-03 16:24:04
cve
cve
CVE-2009-4610
2010-01-13 20:30:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-03-25 08:40:43
openvas
openvas
Mort Bay Jetty Multiple Vulnerabilities
2010-02-02 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
45.4%
Related for UB:CVE-2009-4610