GitHub Advisoryadvisory · Maven

GHSA-fvh3-4v5r-cvvc Improper Authentication in Mortbay Jetty

HIGH Published 2022-05-01 Modified 2022-06-08 Official page ↗
Aliases
CVE-2007-5614
Ecosystem
Maven
Packages
org.mortbay.jetty:jetty
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-287
Reviewed
2022-06-08

Affected packages

• Maven org.mortbay.jetty:jetty: < 6.1.6 → fixed in 6.1.6

Description

Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2007-5614 Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References