Vulnerability Description
Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.
CVSS Score
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mortbay | Jetty | <= 6.1.16 |
Related Weaknesses (CWE)
References
- http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
- http://jira.codehaus.org/browse/JETTY-980Patch
- http://secunia.com/advisories/34975Vendor Advisory
- http://secunia.com/advisories/40553
- http://www.securityfocus.com/bid/34800
- http://www.vupen.com/english/advisories/2010/1792
- https://bugzilla.redhat.com/show_bug.cgi?id=499867
- http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
- http://jira.codehaus.org/browse/JETTY-980Patch
- http://secunia.com/advisories/34975Vendor Advisory
- http://secunia.com/advisories/40553
- http://www.securityfocus.com/bid/34800
- http://www.vupen.com/english/advisories/2010/1792
- https://bugzilla.redhat.com/show_bug.cgi?id=499867
FAQ
What is CVE-2009-1524?
CVE-2009-1524 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) chara...
How severe is CVE-2009-1524?
CVE-2009-1524 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-1524?
Check the references section above for vendor advisories and patch information. Affected products include: Mortbay Jetty.