Security Advisory

CVE-2019-10241

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-04-22 20:14:49

Last updated 2024-08-04 22:17:19

Assigner eclipse

CVSS score not scored

State PUBLISHED

Description

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

← Browse all CVEs View on cve.org ↗