GHSA-5mq8-h82p-wjf2Medium

Jetty Javascript Inclusion Vulnerability

Published
April 30, 2022
Last Modified
February 12, 2024

🔗 CVE IDs covered (1)

CVE-2002-1533 →

📋 Description

Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).

🎯 Affected products1

  • maven/org.mortbay.jetty:jetty:< 4.1.1

🔗 References (5)