PT-2007-6624 · Mort Bay · Mort Bay Jetty

Tomasz Kuczynski · Publicado 2007-12-05 · Atualizado 2022-05-01 · CVE-2007-5613

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mortbay Jetty versions prior to 6.1.6rc1

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via unspecified parameters and cookies.

Recommendations For Mortbay Jetty versions prior to 6.1.6rc1, update to version 6.1.6rc1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5613

GHSA-8H77-9VH5-HW5G

Produtos afetados

Mort Bay Jetty

Referências · 13

• http://securityfocus.com/bid/26697 · Nota
• http://jira.codehaus.org/browse/JETTY-452 · Correção
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00227.html · Aviso do Fabricante
• http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt · Nota
• http://osvdb.org/42497 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00250.html · Aviso do Fabricante
• http://secunia.com/advisories/27925 · Nota
• http://kb.cert.org/vuls/id/237888 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5613 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-8h77-9vh5-hw5g · Aviso do Fabricante
• http://secunia.com/advisories/35143 · Nota
• http://secunia.com/advisories/30941 · Nota