REDHAT-BUG-1713275: XSS
The SSI printenv command echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.
Reference: http://tomcat.apache.org/security-9.html
Upstream commit: https://github.com/apache/tomcat/commit/15fcd16
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1713275?
The severity of REDHAT-BUG-1713275 is considered low since the SSI printenv command is disabled by default and primarily used for debugging.
How do I fix REDHAT-BUG-1713275?
To fix REDHAT-BUG-1713275, ensure that the SSI printenv command is not enabled in your Apache Tomcat configuration.
What type of vulnerability is REDHAT-BUG-1713275?
REDHAT-BUG-1713275 is an XSS (Cross-Site Scripting) vulnerability due to the printenv command echoing user input without escaping.
Is REDHAT-BUG-1713275 likely to affect production systems?
REDHAT-BUG-1713275 is unlikely to affect production systems because the vulnerable SSI printenv command is disabled by default.
Which version of Apache Tomcat is affected by REDHAT-BUG-1713275?
All versions of Apache Tomcat that support the SSI printenv command could potentially be affected by REDHAT-BUG-1713275 if this command is enabled.