CVE-2007-3383
Apache Tomcat SendMailServlet XSS
EPSS 9.5%
描述
Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (`examples/jsp/mail/sendmail.jsp`) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, related to generation of error messages.
如何修補 CVE-2007-3383
目前尚未發布修補版本。可考慮移除受影響套件,或參考下方連結中的上游建議。
- Maven/org.apache.tomcat:tomcat—未列出修補版本
CVE-2007-3383 正在被利用嗎?
中等 — EPSS 為 9.5%,可持續追蹤但非最高優先。
受影響套件(1)
- >= 4.0.0, <= 4.0.6