Skip to content
OpenAdvisories
Medium CVE-2001-0829 EUVD-2022-1630GHSA-58hj-575g-5j25

Apache Tomcat allows webmasters to insert xss into error messages

Published Nov 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Package: org.apache.tomcat:tomcat Ecosystem: Maven

Description

A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.tomcat:tomcat <= 3.2.1 — GHSA-58hj-575g-5j25

References