MEDIUM5.3

GHSA-8h77-9vh5-hw5g

Mortbay Jetty vulnerable to Cross-site scripting

Quick fix

GHSA-8h77-9vh5-hw5g — org.mortbay.jetty:jetty: upgrade to the fixed version with the command below.

# pom.xml: bump <version>6.1.6</version> for org.mortbay.jetty:jetty

Details

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven/org.mortbay.jetty:jetty

Introduced in: 0Fixed in: 6.1.6

Fix# pom.xml: bump <version>6.1.6</version> for org.mortbay.jetty:jetty

References

https://nvd.nist.gov/vuln/detail/CVE-2007-5613[ADVISORY]
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html[WEB]
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html[WEB]
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html[WEB]
http://www.kb.cert.org/vuls/id/237888[WEB]