Cross-Site Scripting Vulnerability in Mortbay Jetty
CVE-2007-5613

Currently unrated

Key Information:

Vendor

Mortbay Jetty

Status
Jetty
Vendor
CVE Published:
5 December 2007

What is CVE-2007-5613?

The Mortbay Jetty application is susceptible to a Cross-Site Scripting (XSS) vulnerability stemming from improper handling of user input in the Dump Servlet. This flaw allows remote attackers to inject arbitrary web scripts or HTML, potentially compromising user data and session integrity. Administrators are urged to update to version 6.1.6rc1 or later to mitigate this risk.

References

https://www.redhat.com/archives/fedora-package-announce/2...
vendor-advisoryx_refsource_FEDORA
http://www.securityfocus.com/bid/26697
vdb-entryx_refsource_BID
http://osvdb.org/42497
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.