Cross-Site Scripting (XSS)

🗓️ 27 Aug 2018 06:30:04Reported by Veracode Vulnerability DatabaseType

Mort Bay Jetty XSS vulnerability in directory listin

Reporter	Title	Published	Views	Family All 27
Tenable Nessus	Mort Bay Jetty < 6.1.17 Multiple Vulnerabilities	18 Aug 200400:00	–	nessus
Tenable Nessus	Fedora 9 : jetty-5.1.15-3.fc9 (2009-5500)	27 May 200900:00	–	nessus
Tenable Nessus	Fedora 11 : jetty-5.1.15-4.fc11 (2009-5509)	27 May 200900:00	–	nessus
Tenable Nessus	Fedora 10 : jetty-5.1.15-3.fc10 (2009-5513)	27 May 200900:00	–	nessus
Tenable Nessus	Apache Hadoop Jetty XSS	24 Aug 201100:00	–	nessus
Tenable Nessus	VMware vCenter Update Manager XSS	29 Jul 201000:00	–	nessus
Tenable Nessus	VMSA-2010-0012 : VMware vCenter Update Manager Fix for Jetty Web Server	17 Feb 201100:00	–	nessus
IBM Security Bulletins	Security Bulletin: Provision to add https and Secure Flag to bayeux_browser cookie for IBM Control Desk.	19 Sep 202220:54	–	ibm
IBM Security Bulletins	Security Bulletin: Jetty vulnerabilities found in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2011-4461, CVS-2009-4612, CVE-2009-4611, CVE-2009-4610, CVS-2009-4609, CVE-2009-1524, CVE-2009-1523)	11 Feb 202018:29	–	ibm
CVE	CVE-2009-1524	5 May 200917:00	–	cve

Vulners

Node

mortbay jettyRange6.0.0rc0–6.1.16java

mortbay jettyRange4.1-rc1–6.0.0beta17java

mortbay jetty-utilRange6.0.0beta1–6.1.16java

Source	Link
github	www.github.com/jetty-project/codehaus-jetty6/commit/d215fa63efd8bdd8248e616d8b5bb32bbc67562d
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
securityfocus	www.securityfocus.com/bid/34800
secunia	www.secunia.com/advisories/34975
secunia	www.secunia.com/advisories/40553
vupen	www.vupen.com/english/advisories/2010/1792
jira	www.jira.codehaus.org/browse/JETTY-980
itrc	www.itrc.hp.com/service/cki/docDisplay.do

15 May 2019 06:17Current

8.5High risk

Vulners AI Score8.5

CVSS 24.3

EPSS0.0044