CVE-2009-3579

medium

Description

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

References

http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt

http://www.securityfocus.com/archive/1/507013/100/0/threaded

Details

Source: Mitre, NVD

Published: 2009-10-07

Updated: 2018-10-10

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Severity: Medium