CVE-2002-1567

Опубликовано: 06 окт. 2003

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.

Ссылки

http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html
Exploit
Vendor Advisory
http://tomcat.apache.org/security-4.html
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html
Exploit
Vendor Advisory
http://tomcat.apache.org/security-4.html
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.4822

Средний

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1567

debian

больше 21 года назад

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows r ...

GHSA-86fp-jgwm-wgj5

github

около 3 лет назад

Apache Tomcat XSS Vulnerability