GitHub Advisoryadvisory · Maven

GHSA-36hp-4x3g-phrg Apache Tomcat's CookieExample Vulnerable to XSS

MEDIUM Published 2022-05-01 Modified 2023-09-22 Official page ↗
Aliases
CVE-2007-3384
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-80
Reviewed
2023-09-22

Affected packages

• Maven org.apache.tomcat:tomcat: >= 3.3.0, <= 3.3.2 (no fix yet)

Description

Multiple cross-site scripting (XSS) vulnerabilities in `examples/servlet/CookieExample` in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

Related

Alias · CVE (1)

  • CVE-2007-3384 Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote… vulnerability

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References