PT-2005-5499 · Apache · Jakarta Tomcat+1
Published
2005-12-31
·
Updated
2023-02-13
·
CVE-2005-4838
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Jakarta Tomcat versions 5.5.6 and earlier
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific JSP files, including
el/functions.jsp, el/implicit-objects.jsp, and jspx/textRotate.jspx in the examples/jsp2/ directory. The vulnerability can be demonstrated by injecting script in a request to snp/snoop.jsp. The issue is due to the failure of various JSPs to escape user-provided data before including it in the returned page, making them susceptible to cross-site scripting attacks.Recommendations
For Jakarta Tomcat versions 5.5.6 and earlier, consider disabling access to the vulnerable JSP files, such as
el/functions.jsp, el/implicit-objects.jsp, and jspx/textRotate.jspx, until a patch is available. Restrict access to the examples/jsp2/ directory to minimize the risk of exploitation. Avoid using the snp/snoop.jsp endpoint with untrusted input until the issue is resolved.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Tomcat
Jakarta Tomcat