Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2008-1232

Опубликовано: 01 авг. 2008
Источник: redhat
EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

Ссылки на источники

Дополнительная информация

Статус:

Low
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=457597tomcat: Cross-Site-Scripting enabled by sendError call

EPSS

Процентиль: 97%
0.38225
Средний

Связанные уязвимости

ubuntu логотип

CVE-2008-1232

ubuntu
почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

nvd логотип

CVE-2008-1232

nvd
почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

debian логотип

CVE-2008-1232

debian
почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 throug ...

github логотип

GHSA-q74x-qqhr-f8rx

github
около 3 лет назад

Apache Tomcat Cross-site scripting (XSS) vulnerability

oracle-oval логотип

ELSA-2008-0648

oracle-oval
почти 17 лет назад

ELSA-2008-0648: tomcat security update (IMPORTANT)

EPSS

Процентиль: 97%
0.38225
Средний