What is GHSA-58hj-575g-5j25?

GHSA-58hj-575g-5j25 is a security advisory published by GitHub Security Advisories with Medium severity. Apache Tomcat allows webmasters to insert xss into error messages

Which CVE IDs does GHSA-58hj-575g-5j25 cover?

GHSA-58hj-575g-5j25 covers the following CVE IDs: CVE-2001-0829. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-58hj-575g-5j25?

GHSA-58hj-575g-5j25 affects 1 product, including: maven/org.apache.tomcat:tomcat:\u003c= 3.2.1.

GHSA-58hj-575g-5j25Medium

Apache Tomcat allows webmasters to insert xss into error messages

Vendor

GitHub Security Advisories

Published

April 30, 2022

Last Modified

September 18, 2023

🔗 CVE IDs covered (1)

CVE-2001-0829 →

📋 Description

A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

🎯 Affected products1

maven/org.apache.tomcat:tomcat:<= 3.2.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2001-0829
https://web.archive.org/web/20021108153830/http://online.securityfocus.com/bid/2982
https://web.archive.org/web/20021201182720/http://jakarta.apache.org/tomcat/tomcat-3.2-doc/readme
https://web.archive.org/web/20061208015126/http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
https://github.com/advisories/GHSA-58hj-575g-5j25