GitHub Advisoryadvisory · Maven

GHSA-58hj-575g-5j25 Apache Tomcat allows webmasters to insert xss into error messages

MEDIUM Published 2022-04-30 Modified 2023-09-18 Official page ↗
Aliases
CVE-2001-0829
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-80
Reviewed
2023-09-18

Affected packages

• Maven org.apache.tomcat:tomcat: <= 3.2.1 (no fix yet)

Description

A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

Related

Alias · CVE (1)

  • CVE-2001-0829 A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file,… vulnerability

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References