Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-10241 →
DEBIAN-CVE-2019-10241
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
jetty9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.18-2"}]}]
Debian:13
jetty9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.18-2"}]}]
Debian:14
jetty9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.18-2"}]}]
Références
- advisory security-tracker.debian.org