Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-4610

Опубликовано: 25 окт. 2009
Источник: redhat
EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.

Дополнительная информация

Статус:

Low
Дефект:
CWE-79
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=532693jetty: multiple XSS and information leaks in demo servlets

EPSS

Процентиль: 53%
0.00296
Низкий

Связанные уязвимости

ubuntu
почти 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.

nvd
почти 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.

debian
почти 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty ...

github
больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.

EPSS

Процентиль: 53%
0.00296
Низкий