GitHub Advisoryadvisory · Maven

GHSA-5hgm-qm5m-5vmw Jakarta Tomcat cross-site scripting (XSS) vulnerability

MEDIUM Published 2022-04-29 Modified 2023-09-18 Official page ↗
Aliases
CVE-2003-0044
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2023-09-18

Affected packages

• Maven org.apache.tomcat:tomcat: >= 3.0, < 3.3.2 → fixed in 3.3.2

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.

Related

Alias · CVE (1)

  • CVE-2003-0044 Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References