Description JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22. References http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt https://security-tracker.debian.org/tracker/CVE-2009-5046 [oss-security] 20110114 Re: CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 mailing-list