Lucene search

K
cvelistApacheCVELIST:CVE-2022-34305
HistoryJun 23, 2022 - 10:30 a.m.

CVE-2022-34305 XSS in examples web application

2022-06-2310:30:16
CWE-79
apache
raw.githubusercontent.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.