PT-2007-6624 · Mort Bay · Mort Bay Jetty

Tomasz Kuczynski · Published 2007-12-05 · Updated 2022-05-01 · CVE-2007-5613

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mortbay Jetty versions prior to 6.1.6rc1

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via unspecified parameters and cookies.

Recommendations For Mortbay Jetty versions prior to 6.1.6rc1, update to version 6.1.6rc1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2007-5613

GHSA-8H77-9VH5-HW5G

Affected Products

Mort Bay Jetty

References · 13

• http://jira.codehaus.org/browse/JETTY-452 · Patch
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00227.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00250.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5613 · Security Note
• https://osv.dev/vulnerability/GHSA-8h77-9vh5-hw5g · Vendor Advisory
• http://securityfocus.com/bid/26697 · Note
• http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt · Note
• http://osvdb.org/42497 · Note
• http://secunia.com/advisories/27925 · Note
• http://kb.cert.org/vuls/id/237888 · Note
• http://secunia.com/advisories/35143 · Note
• http://secunia.com/advisories/30941 · Note