What is GHSA-fvh3-4v5r-cvvc?

GHSA-fvh3-4v5r-cvvc is a security advisory published by GitHub Security Advisories with High severity. Improper Authentication in Mortbay Jetty

Which CVE IDs does GHSA-fvh3-4v5r-cvvc cover?

GHSA-fvh3-4v5r-cvvc covers the following CVE IDs: CVE-2007-5614. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fvh3-4v5r-cvvc?

GHSA-fvh3-4v5r-cvvc has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

Which products are affected by GHSA-fvh3-4v5r-cvvc?

GHSA-fvh3-4v5r-cvvc affects 1 product, including: maven/org.mortbay.jetty:jetty:\u003c 6.1.6.

GHSA-fvh3-4v5r-cvvcHighCVSS 7.3

Improper Authentication in Mortbay Jetty

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2007-5614 →

📋 Description

Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

🎯 Affected products1

maven/org.mortbay.jetty:jetty:< 6.1.6

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2007-5614
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html
http://www.kb.cert.org/vuls/id/438616
https://www.eclipse.org/jetty/about.php
https://github.com/advisories/GHSA-fvh3-4v5r-cvvc