Lucene search

K
osvGoogleOSV:GHSA-36HP-4X3G-PHRG
HistoryMay 01, 2022 - 6:13 p.m.

Apache Tomcat's CookieExample Vulnerable to XSS

2022-05-0118:13:15
Google
osv.dev
11
apache tomcat
cookieexample
xss
vulnerabilities
remote attackers
arbitrary web script
html
error messages

AI Score

5.8

Confidence

High

EPSS

0.007

Percentile

80.5%

Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.

AI Score

5.8

Confidence

High

EPSS

0.007

Percentile

80.5%