CVE-2009-5049: XSS
Published Nov 6, 2019
·Updated
WebApp JSP Snoop page XSS in jetty though 6.1.21.
Affected Software
3 affected components
debian/jetty
Mortbay Jetty<=6.1.21
Debian Debian Linux=8.0
Event History
Nov 6, 2019
CVE Published
via MITRE·06:46 PM
Data Sourced
via MITRE·06:46 PM
Description
Aug 7, 2024
Data Sourced
via Debian·07:35 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-5049?
CVE-2009-5049 is classified as a moderate severity vulnerability due to its potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2009-5049?
To fix CVE-2009-5049, you should upgrade your Jetty software to version 6.1.22 or later.
3
What systems are vulnerable to CVE-2009-5049?
CVE-2009-5049 affects Jetty versions up to and including 6.1.21, as well as Debian GNU/Linux version 8.0.
4
What type of vulnerability is CVE-2009-5049?
CVE-2009-5049 is a Cross-Site Scripting (XSS) vulnerability that affects the JSP Snoop page in Jetty.
5
Is CVE-2009-5049 still a threat today?
While CVE-2009-5049 is considered less critical today due to its age, systems running the affected versions should still be secured against potential exploitation.