Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-3579

Опубликовано: 07 окт. 2009
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mortbay:jetty:6.1.19:*:*:*:*:*:*:*
cpe:2.3:a:mortbay:jetty:6.1.20:*:*:*:*:*:*:*

EPSS

Процентиль: 33%
0.0013
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu
около 16 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

redhat
около 16 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

debian
около 16 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample ...

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

EPSS

Процентиль: 33%
0.0013
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79