exploitDog

CVE-2009-3579

Опубликовано: 06 окт. 2009

Источник: redhat

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=532656jetty: XSS in example Cookie Dump servlet (CORE-2009-0922)

EPSS

Процентиль: 33%

0.0013

Низкий

Связанные уязвимости

CVE-2009-3579

ubuntu

около 16 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

CVE-2009-3579

nvd

около 16 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

CVE-2009-3579

debian

около 16 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample ...

GHSA-hw4x-hf25-fgp2

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

EPSS

Процентиль: 33%

0.0013

Низкий