Lucene search
GoogleOSV:GHSA-58HJ-575G-5J25HistoryApr 30, 2022 - 6:16 p.m.
Apache Tomcat allows webmasters to insert xss into error messages
2022-04-3018:16:47
Google
osv.dev
2
apache
tomcat
xss
vulnerability
javascript
error message
A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.
References
Related
cert
cert
cve
cve
CVE-2001-0829
2001-12-06 05:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-03-25 08:40:44
cvelist
cvelist
CVE-2001-0829
2001-11-22 05:00:00
nessus
nessus
Apache Tomcat 3.x < 3.2.2 JSP Error Condition XSS
2010-11-02 00:00:00
github
github
Apache Tomcat allows webmasters to insert xss into error messages
2022-04-30 18:16:47
nvd
nvd
CVE-2001-0829
2001-12-06 05:00:00
tomcat
tomcat
Fixed in Apache Tomcat 3.2.2
2002-03-09 00:00:00