XSS in Mortbay Jetty
CVE-2009-3579
Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.011 (62.5th percentile) — read the EPSS interpretation.
Affected products
- Mortbay Jetty — versions 6.1.19, 6.1.20
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)