Description

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.

Remediation

References

CVE-2002-1567

Related Vulnerabilities

WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Security Bypass (3.3.0)

MySQL CVE-2013-2375 Vulnerability (CVE-2013-2375)

WordPress Plugin Hunk External Links Cross-Site Scripting (3.0.5)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37148)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-3058)

Severity

Medium

Classification

CVE-2002-1567

Tags

Missing Update Known Vulnerabilities