CVE-2008-1232

Apache Tomcat <6.0.17 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Konstantin Kolinko · textremotemultiple
https://www.exploit-db.com/exploits/32138

References (64)

... and 44 more

Scores

EPSS 0.3815
EPSS Percentile 97.2%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

apache/tomcat < 4.1.37
org.apache.tomcat/tomcat < 4.1.38Maven

Timeline

Published Aug 04, 2008
Tracked Since Feb 18, 2026