CVE-2007-5613: Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote att...

Security readout for executives and security teams

This is an old cross-site scripting issue in Mortbay Jetty’s Dump Servlet before 6.1.6rc1. If that diagnostic servlet is reachable, an attacker could cause script or HTML to run in a user’s browser. Business impact depends on whether the servlet exists, is exposed, and is used near authenticated workflows. Likely exposure is limited to legacy Jetty deployments using versions before 6.1.6rc1 where the Dump Servlet is enabled and reachable. Modern systems are unlikely to be affected unless old Jetty components remain embedded in applications or vendor packages. Treat this as a legacy exposure cleanup item unless an affected Dump Servlet is internet-facing or near sensitive sessions. It is not KEV-listed in the supplied data, but exposed XSS can still create user-session and trust risks. Mitigation focus: Inventory Mortbay Jetty versions across applications and embedded components.; Upgrade affected Jetty deployments to a non-affected release, using vendor package guidance.; Remove or restrict public access to the Dump Servlet where it is not required..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.