CVE-2019-10241

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2019-10241
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-10241.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-10241
Aliases
Related
Published
2019-04-22T20:29:00Z
Modified
2024-10-12T04:57:23.789255Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

References

Affected packages

Debian:11 / jetty9

Package

Name
jetty9
Purl
pkg:deb/debian/jetty9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.18-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / jetty9

Package

Name
jetty9
Purl
pkg:deb/debian/jetty9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.18-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / jetty9

Package

Name
jetty9
Purl
pkg:deb/debian/jetty9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.18-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/apache/activemq

Affected ranges

Type
GIT
Repo
https://github.com/apache/activemq
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
855ba82071e0ce64d9b38cc610edfd38ed332cb3
Last affected
d2dbe18cfbb36b6df142bb94c0c80396571084fc
Type
GIT
Repo
https://github.com/eclipse/jetty.project
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
028f4b9610f12368d418cf0955a1882f4a96c7ec
Last affected
0484a0b3ec71d06f2ee29161bd000a9669dca4fd
Last affected
0554f8d8b4c884de6e35a9f7a5481b78e2f34b4f
Last affected
06b494eeac0a5ba3cf236084caa93c14103071e3
Last affected
096fb58088d87dbce957a822d1dd76b570fd4bbb
Last affected
0af30bce5aebb447f9e235b1634e8104490c1426
Last affected
0bab7e661605babf4b4557a6ec4f9fda5eed86da
Last affected
0bb16b5bf079a7831cf100e720c7deadf222649b
Last affected
0bbebec1e0981eaca2d2110f8322e4a953b1b066
Last affected
0f3b1cbe368f6d5aca01f3a3efc95ac41fff6035
Last affected
14611d2f76be9ebd955bff6cdd38fde4a008a4c3
Last affected
15bd75f858955ce088b3f4971527e6c828a19f16
Last affected
16c435c69d2bbfa16579556a396b1ac48ef3bd84
Last affected
18acd5e78e1325485299fa6e2e2ac834df8424b0
Last affected
19a3ca399d55cfbbdb3d8b5aad5aa164d6956c4f
Last affected
1cc075cf9826f5128dd0c6561ba16c4d7c95c281
Last affected
1f3b3f31f468aa4f6dfaf224ef6542ef6d99fd30
Last affected
1f8159b1e4a42d3f79997021ea1609f2fbac6de5
Last affected
1f9703cf836af6c70ac0665fbc6790c0a8229a7a
Last affected
21ca3f6690bff813c546a1da4bb7950c3f91a814
Last affected
224f63adf3cb5709e0c4ce97e87cb6d2d080cf06
Last affected
26b7597928025169b53b52e1880ec49f9b34c45f
Last affected
27208684755d94a92186989f695db2d7b21ebc51
Last affected
28b0688e030a7a0e8beda866bf5da940393835c5
Last affected
29722bd8803e76bbdbf70266cb9399560c10b712
Last affected
299458fe51e7127429720e8a7ebf8f2bb421ecf6
Last affected
307d23975eb37d690890464668dc8101be5ff9d2
Last affected
3086adc9654a79a0b905608c4669e8b3b3d2a86f
Last affected
362e7665957eb1fa8dee3df7da79848fa03a691a
Last affected
37296bec3c97e19ca0545b73900078f511f8ea9e
Last affected
372c0c566fec8a38524f01ac8f463610aaa14936
Last affected
390a593fe0fb5cae5ddd2626dc5643b9bdb43336
Last affected
390f3200cce7f90f1f3ebc78013c1afea2f93db8
Last affected
3b1533673ef0c22b876a60e4e827162b73371499
Last affected
3ce520221d0240229c862b122d2b06c12a625732
Last affected
3da7b4794b946f8351f7f1b876a5acbdad0cac63
Last affected
3dc8f557c6fa8a442ba25a33e087c394575eb1a4
Last affected
4515fe661b88727fef7f880ad58c2988dce3cd35
Last affected
4573761367104e6c79456dbb4affc7c129d8d0f7
Last affected
461053716206b61d5a0513bc66b606e742f3cfad
Last affected
47868688ddfd30109ce0edda0961fe739c23f1d9
Last affected
4830fd15e94492b3ac4eb5ed772d7746a92d2a49
Last affected
49123a3313e396028d0041f631b7243485755f63
Last affected
4a674b9cc96de3e28d4fddf9abb8e7d1a456db96
Last affected
4aaa576b2f231bd487ca715dcb3f87eb94abc286
Last affected
513b5e5f900e302e363b0cebfd809dfca8884d50
Last affected
556ecbcdcf4bdb61c8ca33c5fb009a2747a519c7
Last affected
56c4cd2d3052891b847a73f19a7b372cf8d63699
Last affected
59681c6885d91642ff3db6c5fe6b51415facd9f7
Last affected
5c2821fdeed309fade59c3f6895fd38b91eea962
Last affected
63273aa40b52c1e4d93217df87f72f1139d4ff36
Last affected
63a014dc6af2179947dbfa77a65b51112e0092f0
Last affected
680ecd646b8bf2ece4df4022a56e62886fd090de
Last affected
6c8af2b895021de087bcb65e756a34b168221ca3
Last affected
705048cc4958ef50aca5070c275d3594db9ab700
Last affected
71ad2114c5e40c7cc4b81c4f9e42e3e3acf49efc
Last affected
71e0f4d8ce1e6e78ce6de6429e994dcd60027ba7
Last affected
772ff0bfd4a82a08219dab0757a1ca14e6549629
Last affected
778fac638d7e4c890c58167dbbe43a98fcdcec4d
Last affected
798fc8118b4eec94bb96122b4242233dae9b5e5a
Last affected
7b94bc32f4b5cbeb1d12ef25de7750503b2878eb
Last affected
7dd84279d13352a2f2e4fb87cc42da79a0646fe3
Last affected
80fb788d0c152c0628e1292f9d571baee720e336
Last affected
82b8fb23f757335bb3329d540ce37a2a2615f0a8
Last affected
84205aa28f11a4f31f2a3b86d1bba2cc8ab69827
Last affected
8b35fdc5a5d9870bab05bb11ac9f4a3f2977a153
Last affected
8ba0f2d95dbacbe34898f8de15389e39b4e44279
Last affected
8c58a9abc4bfae272a3dfc2a7e2587134ce3abd4
Last affected
8c637489ae2bdc2d281b8db171e7427a47fdcc2b
Last affected
913c63e597a0376590c4fc344aefe7e19514737c
Last affected
95e94b49d861b1b3af8571945392d6a96688d8c1
Last affected
97d2bd95a6dd5fdbc64910c757140fbeab2afa62
Last affected
9b6890d3c1b5b666ed8bc5743df49fd0a13b7a3c
Last affected
9bfeb2221f4fde3a32c042486df06bb09d7bd672
Last affected
9d648f40001f165472d863b89bb68313fbf67208
Last affected
9d8ad7489c2dc546e6cfe74c801d17f638430d1d
Last affected
9fd6d4354e7a6d5ea0b0a8fff47351ba37b9babd
Last affected
a6178426956b56b24f1fdeb496a40553d2582b64
Last affected
b35d32f2b89e686ab55bd73e5a7fd37058303d43
Last affected
b6573c751d79b2711cc12500c921f644997006b3
Last affected
b91cc8a4ea8c9deb6a8c0e038a2a4a1f8b9c85be
Last affected
b935082f5919df32c5fd0a6df11ab2e3e0623900
Last affected
bb1d69ca5204dd1ce822d6a6b292dd309352e0b4
Last affected
bb4f3c4882a3f4f8a4e9a4446890cfebe756e2d0
Last affected
bc673eab1a2d21e568cde2cf786ee062529ab3d2
Last affected
bcbcee7f237c115db55bc8ec49b4491a84104c92
Last affected
bd7a8eddbca0a70f8c9a98bb128794a865b1e42e
Last affected
bee564c7d942447f02e8d87a2ea5fe30e651a59c
Last affected
bf9d17540c7ae4c91be30c045a9485aa2030d3e5
Last affected
c0b191119b74afafb6b59ecaa9d7a66dae056498
Last affected
c177d649f43e1c7eb50d22ed6171c817ec18051e
Last affected
c3a78e70a8745fcc1d83bee46cca89e03267632a
Last affected
c4550056e785fb5665914545889f21dc136ad9e6
Last affected
c54efb59293b96a6e6525a8d2e108f84b6ba75d0
Last affected
c6e5bdf8b4b979891c685c37a09ae00f42d06ec2
Last affected
c78b7c6d97ab58fcd618f7b1706b2ec1e0cf1989
Last affected
c86f06646a024c995b0101022c7dc5818f64b23f
Last affected
c8e6256c3d312763aee56fb3e33340f028052964
Last affected
c9493e74cb4f10f4abbc9018a634e005155d6d6e
Last affected
cae7e6543057a603e021dfff8453ecae95816130
Last affected
cdbe7336840cf47c2dc45d3b0285cb81674ff39d
Last affected
d2a16ed2dc3ff1bc64e72610dd9876d9831594ba
Last affected
d36d57d5c7d3a9ee19e4f75e04465a68fa26eccd
Last affected
d3dec8d51310670d44fcf5b125644fd9d3924707
Last affected
d3ff3423f0c2ac6484008ee30509853e509d6734
Last affected
d5fc0523cfa96bfebfbda19606cad384d772f04c
Last affected
d737e1c638653988ce7d8e5bfb89859347e1c306
Last affected
da11e86bccbcbd65a72012543c114a0af8a86d6f
Last affected
daa59876e6f384329b122929e70a80934569428c
Last affected
dac1d17a2d2146cf36a73efd1d9c21202680de58
Last affected
dc0c3f4c5277d48f29cd6aa8e3c2c9f10ff11b27
Last affected
dc62cb5ac7d6f6953b88dc429ee8172ef02388c0
Last affected
df03355d00e736b080422d2304dd5bcc73f7db78
Last affected
df1ed4fb03154f6a7b002bd95086c3def1bfec65
Last affected
df9fdbebcd0521bcf2d860bf258a811f8a5c9dce
Last affected
e38e6b5a7f68e8bcce6ebae4e3b5e1576782854a
Last affected
e81912f98c9af8927fdc0505df7011c1e368112a
Last affected
e8af5883c6e958c58b8443314def48e932d73215
Last affected
e92fd438fda5ee7dd62d84b112dc4a6e75d38645
Last affected
e9edf4c24b038794c045e8e5f275869db6f04e94
Last affected
eb70b240169fcf1abbd86af36482d1c49826fa0b
Last affected
ecba378f5c3603fecf677fb47aeb88a0a7b20935
Last affected
edc7646a4c80235b9b12f496a42f880aa957d3a7
Last affected
eec01cbff415ba12c7bdce20d021c2c1d27843a6
Last affected
fdae77842c571a2b9437d1c2b281e0421861fac9

Affected versions

Other

PRE-MERGE-20120719-1138

activemq-5.*

activemq-5.10.0
activemq-5.11.0
activemq-5.12.0
activemq-5.13.0
activemq-5.14.0
activemq-5.15.0
activemq-5.15.1
activemq-5.15.2
activemq-5.15.3
activemq-5.15.4
activemq-5.15.5
activemq-5.15.6
activemq-5.15.7
activemq-5.15.8
activemq-5.15.9
activemq-5.9.0

jetty-7.*

jetty-7.4.4.v20110707
jetty-7.5.0.RC0
jetty-7.5.0.RC1
jetty-7.5.0.RC2
jetty-7.5.0.v20110901
jetty-7.5.1.v20110907
jetty-7.5.1.v20110908
jetty-7.5.2.v20111006
jetty-7.5.3.v20111011
jetty-7.5.4.v20111024
jetty-7.6.0.RC0
jetty-7.6.0.RC1
jetty-7.6.0.RC2
jetty-7.6.0.RC3
jetty-7.6.0.RC4
jetty-7.6.0.RC5
jetty-7.6.0.v20120125
jetty-7.6.0.v20120127
jetty-7.6.1.v20120215
jetty-7.6.10.v20130312
jetty-7.6.11.v20130520
jetty-7.6.11.v20130725
jetty-7.6.12.v20130726
jetty-7.6.13.v20130910
jetty-7.6.2.v20120302
jetty-7.6.2.v20120308
jetty-7.6.3.v20120413
jetty-7.6.3.v20120416
jetty-7.6.4.v20120522
jetty-7.6.4.v20120524
jetty-7.6.5.v20120713
jetty-7.6.5.v20120716
jetty-7.6.6.v20120903
jetty-7.6.7.v20120910
jetty-7.6.8.v20121106
jetty-7.6.9.v20130131

jetty-8.*

jetty-8.0.0.RC0
jetty-8.0.0.v20110901
jetty-8.0.1.v20110907
jetty-8.0.1.v20110908
jetty-8.0.2.v20111006
jetty-8.0.3.v20111011
jetty-8.0.4.v20111024
jetty-8.1.0.RC0
jetty-8.1.0.RC1
jetty-8.1.0.RC2
jetty-8.1.0.RC4
jetty-8.1.0.RC5
jetty-8.1.0.v20120125
jetty-8.1.0.v20120127
jetty-8.1.1.v20120215
jetty-8.1.10.v20130312
jetty-8.1.11.v20130520
jetty-8.1.12.v20130725
jetty-8.1.12.v20130726
jetty-8.1.13.v20130910
jetty-8.1.13.v20130916
jetty-8.1.2.v20120302
jetty-8.1.2.v20120308
jetty-8.1.3.v20120413
jetty-8.1.3.v20120416
jetty-8.1.4.v20120522
jetty-8.1.4.v20120524
jetty-8.1.5.v20120713
jetty-8.1.5.v20120716
jetty-8.1.6.v20120903
jetty-8.1.7.v20120910
jetty-8.1.8.v20121106
jetty-8.1.9.v20130131

jetty-9.*

jetty-9.0.0.M0
jetty-9.0.0.M1
jetty-9.0.0.M2
jetty-9.0.0.M3
jetty-9.0.0.M4
jetty-9.0.0.M5
jetty-9.0.0.RC0
jetty-9.0.0.RC1
jetty-9.0.0.RC2
jetty-9.0.0.RC3
jetty-9.0.0.v20130308
jetty-9.0.1.v20130408
jetty-9.0.2.v20130417
jetty-9.0.2.v20140415
jetty-9.0.3.v20130506
jetty-9.0.4.v20130621
jetty-9.0.4.v20130625
jetty-9.0.5.v20130813
jetty-9.0.5.v20130815
jetty-9.0.6.v20130919
jetty-9.0.6.v20130930
jetty-9.0.7.v20131031
jetty-9.0.7.v20131107
jetty-9.0.x
jetty-9.1.0.M0
jetty-9.1.0.RC0
jetty-9.1.0.RC1
jetty-9.1.0.RC2
jetty-9.1.0.v20131115
jetty-9.1.1.v20140108
jetty-9.1.2.v20140210
jetty-9.1.3.v20140225
jetty-9.1.4.v20140401
jetty-9.2.0.M0
jetty-9.2.0.M1
jetty-9.2.0.RC0
jetty-9.2.0.v20140523
jetty-9.2.0.v20140526
jetty-9.2.1.v20140609
jetty-9.2.2.v20140723
jetty-9.2.3.v20140905
jetty-9.2.4.v20141103
jetty-9.2.5.v20141112
jetty-9.2.6.v20141203

npn-api-1.*

npn-api-1.0.0.v20120402
npn-api-1.1.0.v20120525