{"id":"CVE-2002-1533","aliases":[],"url":"https://o3.security/vulnerability/CVE-2002-1533","summary":"Jetty Javascript Inclusion Vulnerability","details":"Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (`%0a`).","published":"2022-04-30T18:21:21Z","modified":"2024-11-28T05:41:39.980409Z","cvss":null,"epss":{"score":0.02407,"percentile":0.82804,"asOf":"2026-08-22"},"cisaKev":null,"exploitsKnown":3,"affectedPackages":[{"ecosystem":"Maven","name":"org.mortbay.jetty:jetty","fixedVersion":"4.1.1"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1533"},{"type":"WEB","url":"https://web.archive.org/web/20040705203137/http://xforce.iss.net/xforce/xfdb/10219"},{"type":"WEB","url":"https://web.archive.org/web/20041213153950/http://archives.neohapsis.com/archives/bugtraq/2002-09/0337.html"},{"type":"WEB","url":"https://web.archive.org/web/20061020173202/http://www.securityfocus.com/bid/5821"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-11-28T05:41:39.980409Z"}}