header-logo
Suggest Exploit
vendor:
Tomcat
by:
Not specified
7.5
CVSS
HIGH
Cross-Site Scripting (XSS)
79
CWE
Product Name: Tomcat
Affected Version From: Not specified
Affected Version To: Not specified
Patch Exists: NO
Related CWE: Not specified
CPE: a:apache:tomcat
Metasploit:
Other Scripts:
Platforms Tested: Not specified
Not specified

Cross-Site Scripting Vulnerabilities in Apache Tomcat

Apache Tomcat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Mitigation:

To mitigate these vulnerabilities, it is recommended to sanitize and validate user-supplied input before using it in web applications. Additionally, keeping the software up to date with the latest security patches and versions can help prevent such vulnerabilities.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/45015/info

Apache Tomcat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http:/www.example.com/html/sessions?path=/&sort=[xss]

Navigation

Suggest Exploit

Services By CQR