In short
- CVE-2002-1533 is a MEDIUM (CVSS 5.8) vulnerability affecting org.mortbay.jetty:jetty, jetty (jetty).
- Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
- Fix: update to 4.1.1 or later.
Description
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
NVD description
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
More vulnerabilities in org.mortbay.jetty:jetty
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free