TI-2009-04803 CVE-2009-5049 · GHSA-2q9g-c5jx-82x3
WebApp JSP Snoop page XSS in jetty though 6.1.21.
Priority LOW 31
WebApp JSP Snoop page XSS in jetty though 6.1.21.
Vulnerabilities
11 records
TI-2009-04802 CVE-2009-5048 · GHSA-23gf-hmcg-fp4m
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.
Priority LOW 31
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.
TI-2011-03863 CVE-2011-4461 · GHSA-qxp4-27vx-xmm3
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting…
Priority LOW 32
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by…
TI-2009-04368 CVE-2009-4612 · GHSA-xj65-pmm9-g4xv
Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort…
Priority LOW 26
Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI u…
TI-2009-04367 CVE-2009-4611 · GHSA-6jxp-7g74-2rc3
Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing…
Priority LOW 39
Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or over…
TI-2009-04366 CVE-2009-4610 · GHSA-hp79-wc4h-wf58
Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow…
Priority LOW 26
Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (…
TI-2009-04365 CVE-2009-4609 · GHSA-h7pw-qxgc-9wwm
The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain…
Priority LOW 26
The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the…
TI-2009-03416 CVE-2009-3579 · GHSA-hw4x-hf25-fgp2
Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET reque…
TI-2009-01445 CVE-2009-1524 · GHSA-9j6r-678r-mvp8
Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote…
Priority LOW 25
Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.
TI-2009-01444 CVE-2009-1523 · GHSA-9986-w5h5-vw59
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before…
Priority MEDIUM 44
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
TI-2005-03541 CVE-2005-3747 · GHSA-cwq3-qp8v-w8q3
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source…
Priority LOW 30
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters.