Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2007-5613

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

PublishedDec 05, 2007, 11:46

Published Bycret@cert.org

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.mortbay.jetty:jetty(Maven)06.1.6N/A

References

http://jira.codehaus.org/browse/JETTY-452
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://osvdb.org/42497
http://secunia.com/advisories/27925
http://secunia.com/advisories/30941
http://secunia.com/advisories/35143
http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
http://www.kb.cert.org/vuls/id/237888
http://www.securityfocus.com/bid/26697
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html

Weakness Type

CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)