CVE-2007-5613

N/A Unknown

Published: December 05, 2007 Modified: April 23, 2026

Description

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://jira.codehaus.org/browse/JETTY-452

Source: cret@cert.org

Patch

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Source: cret@cert.org

http://osvdb.org/42497

Source: cret@cert.org

http://secunia.com/advisories/27925

Source: cret@cert.org

http://secunia.com/advisories/30941

Source: cret@cert.org

http://secunia.com/advisories/35143

Source: cret@cert.org

http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/237888

Source: cret@cert.org

US Government Resource

http://www.securityfocus.com/bid/26697

Source: cret@cert.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html

Source: cret@cert.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html

Source: cret@cert.org

http://jira.codehaus.org/browse/JETTY-452