Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jetty Servlet Engine跨站脚本漏洞
Vulnerability Description
Jetty JSP servlet引擎存在跨站脚本(XSS)漏洞。远程攻击者借助.jsp文件的HTTP请求插入任意HTML或者脚本,该.jsp文件的名称包含恶意的脚本和一些编码的换行符(%0a)。
CVSS Information
N/A
Vulnerability Type
N/A