Moderate severityNVD Advisory· Published Mar 31, 2003· Updated Jun 16, 2026
CVE-2002-1533
CVE-2002-1533
Description
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.mortbay.jetty:jettyMaven | < 4.1.1 | 4.1.1 |
Affected products
2Patches
Vulnerability mechanics
References
8- archives.neohapsis.com/archives/bugtraq/2002-09/0337.htmlnvdExploit
- www.securityfocus.com/bid/5821nvdExploitVendor Advisory
- www.iss.net/security_center/static/10219.phpnvdVendor Advisory
- github.com/advisories/GHSA-5mq8-h82p-wjf2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2002-1533ghsaADVISORY
- web.archive.org/web/20040705203137/http://xforce.iss.net/xforce/xfdb/10219ghsaWEB
- web.archive.org/web/20041213153950/http://archives.neohapsis.com/archives/bugtraq/2002-09/0337.htmlghsaWEB
- web.archive.org/web/20061020173202/http://www.securityfocus.com/bid/5821ghsaWEB
News mentions
0No linked articles in our index yet.