CVE-2001-0829: Apache Tomcat allows webmasters to insert xss into error messages
(updated )
A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.
References
- github.com/advisories/GHSA-58hj-575g-5j25
- nvd.nist.gov/vuln/detail/CVE-2001-0829
- web.archive.org/web/20021108153830/http://online.securityfocus.com/bid/2982
- web.archive.org/web/20021201182720/http://jakarta.apache.org/tomcat/tomcat-3.2-doc/readme
- web.archive.org/web/20061208015126/http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
Code Behaviors & Features
Detect and mitigate CVE-2001-0829 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →