Cross-site Scripting (XSS)

2019-01-1509:03:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

56.7%

JSON

mod_cluster is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message

CPENameOperatorVersion
tomcat-nativeeq1.1.23__4.1.ep6.el5
tomcat-nativeeq1.1.27__4.redhat_1.ep6.el6
tomcat-nativeeq1.1.24__1.ep6.el6
tomcat-nativeeq1.1.27__4.redhat_1.ep6.el5
tomcat-nativeeq1.1.32__2.redhat_2.ep7.el7
tomcat-nativeeq1.1.24__1.1.ep6.el5
tomcat-nativeeq1.1.20__2.1.2.ep5.el6
tomcat-nativeeq1.1.23__4.ep6.el6
tomcat-nativeeq1.1.30__2.redhat_1.ep6.el7
tomcat-nativeeq1.1.30__2.redhat_1.ep6.el5

Name	Operator	Version
tomcat-native	eq	1.1.23__4.1.ep6.el5
tomcat-native	eq	1.1.27__4.redhat_1.ep6.el6
tomcat-native	eq	1.1.24__1.ep6.el6
tomcat-native	eq	1.1.27__4.redhat_1.ep6.el5
tomcat-native	eq	1.1.32__2.redhat_2.ep7.el7
tomcat-native	eq	1.1.24__1.1.ep6.el5
tomcat-native	eq	1.1.20__2.1.2.ep5.el6
tomcat-native	eq	1.1.23__4.ep6.el6
tomcat-native	eq	1.1.30__2.redhat_1.ep6.el7
tomcat-native	eq	1.1.30__2.redhat_1.ep6.el5