Description
Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.
Remediation
References
http://www.coresecurity.com/content/jetty-persistent-xss
http://www.securityfocus.com/archive/1/507013/100/0/threaded
http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt
Related Vulnerabilities
CVE-2014-125087 Vulnerability in maven package com.jamesmurty.utils:java-xmlbuilder
CVE-2023-26486 Vulnerability in maven package org.webjars.npm:vega-functions
CVE-2020-28168 Vulnerability in maven package org.webjars.npm:axios
CVE-2023-34466 Vulnerability in maven package org.xwiki.platform:xwiki-platform-tag-api
CVE-2022-23596 Vulnerability in maven package com.github.junrar:junrar