| Vulnerability Name: | CVE-2002-1567 (CCN-13254) | ||||||||
| Assigned: | 2003-08-21 | ||||||||
| Published: | 2003-08-21 | ||||||||
| Updated: | 2019-03-25 | ||||||||
| Summary: | Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script. | ||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: Vuln-Dev Mailing List, Wed Aug 21 2002 - 16:31:08 CDT Apache Tomcat 4.1 Cross-Site Scripting Vulnerability Source: VULN-DEV Type: Exploit, Vendor Advisory 20020821 Apache Tomcat 4.1 Cross-Site Scripting Vulnerability Source: MITRE Type: CNA CVE-2002-1567 Source: CONFIRM Type: UNKNOWN http://tomcat.apache.org/security-4.html Source: CCN Type: OSVDB ID: 9208 Apache Tomcat .jsp Encoded Newline XSS Source: XF Type: UNKNOWN tomcat-jsp-xss(13254) Source: MLIST Type: UNKNOWN [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ Source: MLIST Type: UNKNOWN [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ Source: MLIST Type: UNKNOWN [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||