GitHub Advisoryadvisory · Maven

GHSA-wjwr-3jch-479j Apache Tomcat SendMailServlet XSS

MEDIUM Published 2022-05-01 Modified 2023-09-22 Official page ↗
Aliases
CVE-2007-3383
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-80
Reviewed
2023-09-22

Affected packages

• Maven org.apache.tomcat:tomcat: >= 4.0.0, <= 4.0.6 (no fix yet) • Maven org.apache.tomcat:tomcat: >= 4.1.0, <= 4.1.36 (no fix yet)

Description

Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (`examples/jsp/mail/sendmail.jsp`) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, related to generation of error messages.

Related

Alias · CVE (1)

  • CVE-2007-3383 Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache… vulnerability

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References