Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13668
HistoryApr 23, 2019 - 3:03 a.m.

Cross-site Scripting (XSS)

2019-04-2303:03:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

0.005 Low

EPSS

Percentile

75.5%

jetty-util is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists as the directory listing does not encode characters in UTF-8, allowing a remote attacker to inject arbitrary Javascript into a victim’s browser through unicode characters.

References