Description
Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.mortbay.jetty:jetty | < 6.1.6 | 6.1.6 | GHSA-8h77-9vh5-hw5g |
References
- FEDORA-2008-6141 vendor-advisory
- 26697 vdb-entry
- 42497 vdb-entry
- FEDORA-2008-6164 vendor-advisory
- 30941 third-party-advisory
- SUSE-SR:2009:004 vendor-advisory
- http://jira.codehaus.org/browse/JETTY-452
- VU#237888 third-party-advisory
- 35143 third-party-advisory
- 27925 third-party-advisory
- http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt