CVE-2002-1567: XSS
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1567?
CVE-2002-1567 is considered a moderate severity vulnerability due to the ability for attackers to execute arbitrary web scripts.
How do I fix CVE-2002-1567?
To fix CVE-2002-1567, upgrade Apache Tomcat from version 4.1.0 to at least version 4.1.29.
What causes CVE-2002-1567?
CVE-2002-1567 is caused by improper handling of encoded newlines in URLs that leads to cross-site scripting.
In which versions of Apache Tomcat does CVE-2002-1567 exist?
CVE-2002-1567 exists in Apache Tomcat version 4.1.0 and earlier versions.
What are the risks associated with CVE-2002-1567?
The risks include the potential for attackers to steal user cookies and perform unauthorized actions on behalf of users.