CVE Feed

    Dashboard / CVE / CVE-2009-5048

    CVE-2009-5048

    Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.

    Published:Nov 6, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 6, 2019
    EPSS Score:0.01086
    CVSS Score:6.1

    Affected Products

    Vendor
    Mortbay
    Product
    Jetty

    Exploits

    http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txthttp://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt

    Related CVEs

    CVE-2009-5049 (CVSS 6.1) — WebApp JSP Snoop page XSS in jetty though 6.1.21.…
    CVE-2011-4461 (CVSS 5.3) — Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigge…
    CVE-2009-4611 (CVSS 7.5) — Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters,…
    CVE-2009-4610 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to …
    CVE-2009-4612 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x throu…
    CVE-2009-4609 (CVSS 5) — The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about…
    CVE-2009-3579 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 an…
    CVE-2009-1524 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arb…
    CVE-2009-1523 (CVSS 5) — Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x thro…
    CVE-2005-3747 (CVSS 5) — Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, po…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High