Lucene search
Veracode Vulnerability DatabaseVERACODE:13519HistoryMar 25, 2019 - 8:40 a.m.
Command Injection
2019-03-2508:40:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.011 Low
EPSS
Percentile
84.7%
Mort Bay Jetty is vulnerable to command injection. An attacker can submit an input containing special characters that are copied to stack traces printed to jetty log when an exception is raised due to a error in parsing user input. When log file is viewed in a terminal that understands special escape sequences, the character sequence are executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetty server | le | 7.0.0.pre5 |
Related
ubuntucve
ubuntucve
CVE-2009-4611
2010-01-13 00:00:00
osv
osv
Improper input validation in Mort Bay Jetty
2022-05-02 03:56:13
cvelist
cvelist
CVE-2009-4611
2010-01-13 20:00:00
cve
cve
CVE-2009-4611
2010-01-13 20:30:00
CVE-2009-5047
2019-11-15 16:15:09
prion
prion
Design/Logic Flaw
2010-01-13 20:30:00
nvd
nvd
CVE-2009-4611
2010-01-13 20:30:00
CVE-2009-5047
2019-11-15 16:15:09
github
github
Improper input validation in Mort Bay Jetty
2022-05-02 03:56:13
openvas
openvas
Mort Bay Jetty 6.0.0 - 7.0.0 Multiple Vulnerabilities - Active Check
2010-02-02 00:00:00
