Approved changes feed: RSS · Atom

cpe:2.3:a:jetty:jetty:4.1.0_rc4:*:*:*:*:*:*:*

part: a version: 4.1.0_rc4 update: *

VendorJetty (4c10c043-642c-552d-950a-08432c8a8ee6)
ProductJetty (baa9c4fa-d1ba-5b4f-b70a-dc5423602b2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/jetty purl2cpe 2026-06-01 10:15:11.687549
pkg:github/eclipse/jetty.project purl2cpe 2026-06-01 10:15:11.687552
pkg:golang/github.com/eclipse/jetty.project purl2cpe 2026-06-01 10:15:11.687555
pkg:rpm/fedora/jetty purl2cpe 2026-06-01 10:15:11.687558
pkg:sourceforge/jetty purl2cpe 2026-06-01 10:15:11.687560

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1533 vulnerable 2026-06-08 04:46:23.962889 Details available
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
Published: 2003-03-18T05:00:00.000Z
Updated: 2024-08-08T03:26:28.976Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.