CVE-2019-10241 — Vulnetix

Try Vulnetix Request Demo

CVE-2019-10241 PUBLISHED

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

EPSS 9.69% · 92.9th percentile

Risk Scores

EPSS Score

9.69%

92.9th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:16.04:LTS	jetty8	0, 8.1.19-1, 8.1.18-3
Ubuntu:14.04:LTS	jetty8	8.1.3-9, 0, 8.1.3-8
Ubuntu:18.04:LTS	jetty9	9.4.15-1~18.04.1ubuntu1, 0, 9.2.22-2
Ubuntu:16.04:LTS	jetty	6.1.26-5ubuntu0.1, 6.1.26-5, 0
Ubuntu:14.04:LTS	jetty	6.1.26-1ubuntu1.1, 6.1.26-1ubuntu1.2, 6.1.26-1ubuntu1

Timeline

Apr 22, 2019 CVE Published
Jul 23, 2019 CVE Updated
Apr 14, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Apr 23, 2022 EPSS Score
Mar 17, 2025 EPSS Score
Mar 23, 2025 EPSS Score
Mar 24, 2025 EPSS Score
Mar 25, 2025 EPSS Score
Apr 6, 2025 EPSS Score

References

https://ubuntu.com/security/CVE-2019-10241 third-party-advisory
https://bugs.eclipse.org/bugs/show_bug.cgi?id=546121 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2019-10241 third-party-advisory

Open in Interactive Console →