Description

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

Remediation

References

CVE-2022-34305

Related Vulnerabilities

WordPress Plugin Export Users to CSV Unspecified Vulnerability (1.3)

PHP Use After Free Vulnerability (CVE-2016-9936)

WordPress Plugin Gallery-Flagallery Photo Portfolio Multiple Vulnerabilities (2.00)

WordPress Plugin Chief Editor Multiple Vulnerabilities (3.7.1)

MySQL CVE-2018-2767 Vulnerability (CVE-2018-2767)

Severity

Medium

Classification

CVE-2022-34305 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities