CVE-2009-3579: Mortbay Jetty

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/.

Affected products

• Mortbay Jetty: version 6.1.19 only; version 6.1.20 only

Published 2009-10-07. Last modified 2026-06-16.