CVE-2019-10241CWE-79

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a…

published April 22, 2019

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09365 · 95.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2019-04-22T20:14Z
EPSS history
Timeline
  • 22 APR 20:14Z
    In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a…
    cvelistv5