CVE-2002-1533
Jetty JSP - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Skinnay · textwebappsjsp
https://www.exploit-db.com/exploits/21875
Scores
EPSS
0.0519
EPSS Percentile
89.9%
Details
Status
published
Products (2)
jetty/jetty
4.1.0_rc4
org.mortbay.jetty/jetty
0 - 4.1.1Maven
Published
Mar 31, 2003
Tracked Since
Feb 18, 2026