logo

Database

Lack of data validation - Path Traversal In org.mortbay.jetty:jetty

Description

Jetty Javascript Inclusion Vulnerability Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2002-15332. NVD-2002-15333. OSV-2002-15334. GCVE-2002-1533

References

1. https://web.archive.org/web/20040705203137/http://xforce.iss.net/xforce/xfdb/102192. https://web.archive.org/web/20041213153950/http://archives.neohapsis.com/archives/bugtraq/2002-09/0337.html3. https://web.archive.org/web/20061020173202/http://www.securityfocus.com/bid/58214. https://www.exploit-db.com/exploits/21875

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.