Apache Tomcat's CookieExample Vulnerable to XSS

Description

References

• nvd.nist.gov/vuln/detail/CVE-2007-3384 · ADVISORY
• web.archive.org/web/20070824135030/http://securityreason.com/securityalert/2971 · WEB
• web.archive.org/web/20071117100258/http://securitytracker.com/alerts/2007/Aug/1018503.html · WEB
• web.archive.org/web/20170323011513/http://www.securityfocus.com/bid/25174 · WEB
• web.archive.org/web/20201207035111/http://www.securityfocus.com/archive/1/475321/100/0/threaded · WEB
• tomcat.apache.org/security-3.html · WEB
• osvdb.org/39035
• securityreason.com/securityalert/2971
• securitytracker.com/id
• securityfocus.com/archive/1/475321/100/0/threaded
• securityfocus.com/bid/25174 · Patch

Mais vulnerabilidades de org.apache.tomcat:tomcat

• CVE-2026-68525CRÍTICO 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-65905CRÍTICO 9.8Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made…
• CVE-2026-65182CRÍTICO 9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a lo…
• CVE-2026-43515CRÍTICO 9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This i…
• CVE-2026-43514BAIXO 3.7Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 th…