CVE-2007-5613

MEDIUM5.3EPSS 3.9%

Mortbay Jetty vulnerable to Cross-site scripting

Published: 5/1/2022Modified: 11/8/2023

Description

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

Affected packages (1)

Maven/org.mortbay.jetty:jettyfrom 0, < 6.1.6

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References (5)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2007-5613
WEBhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
WEBhttps://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html
WEBhttps://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html
WEBhttp://www.kb.cert.org/vuls/id/237888