Apache Tomcat Cross-Site Scripting Vulnerability
BID:2982
Info
Apache Tomcat Cross-Site Scripting Vulnerability
| Bugtraq ID: | 2982 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-0829 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 02 2001 12:00AM |
| Updated: | Jul 11 2009 06:56AM |
| Credit: | Discovered and posted to Bugtraq by TAKAGI, Hiromitsu <[email protected]> on July 2, 2001. |
| Vulnerable: |
Apache Tomcat 3.2.1 |
| Not Vulnerable: | |
Discussion
Apache Tomcat Cross-Site Scripting Vulnerability
Apache Tomcat does not filter script embedding from links that are displayed on a server's website. A malicious webmaster can exploit this vulnerability to cause JavaScript commands or embedded scripts to be executed by any user who clicks on the hyper-link. Upon clicking on the hyper-link, Tomcat will generate an error message including the specified or embedded script. The specified or embedded scripting will be executed in the client's browser and treated as content originating from the target server returning the error message (even though the scripting may have originated at another site entirely).
Apache Tomcat does not filter script embedding from links that are displayed on a server's website. A malicious webmaster can exploit this vulnerability to cause JavaScript commands or embedded scripts to be executed by any user who clicks on the hyper-link. Upon clicking on the hyper-link, Tomcat will generate an error message including the specified or embedded script. The specified or embedded scripting will be executed in the client's browser and treated as content originating from the target server returning the error message (even though the scripting may have originated at another site entirely).
Exploit / POC
Apache Tomcat Cross-Site Scripting Vulnerability
TAKAGI, Hiromitsu provided the following example in his BugTraq posting:
http://Tomcat/jsp-mapped-dir/<SCRIPT>alert(document.cookie)</SCRIPT>.jsp
TAKAGI, Hiromitsu provided the following example in his BugTraq posting:
http://Tomcat/jsp-mapped-dir/<SCRIPT>alert(document.cookie)</SCRIPT>.jsp
References
Apache Tomcat Cross-Site Scripting Vulnerability
References:
References:
- Tomcat Release Announcement (Apache Software Foundation)