CVE-2009-4610

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the…

published January 13, 2010

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03044 · 87.4th percentile
Published
2010-01-13T20:00Z
EPSS history
Timeline
  • 13 JAN 20:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the…
    cvelistv5