Advisory details:
project_kb_statements / CVE-2019-0221
| Advisory ID | project_kb_statements/CVE-2019-0221 |
| Aliases | |
| Summary | The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| There are no known severity scores. | ||
| Reference id | Reference type | URL |
|---|---|---|
| There are no known references. | ||
| Data source | Exploit-DB |
|---|---|
| Date added | July 13, 2021 |
| Description | Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS) |
| Ransomware campaign use | Unknown |
| Source publication date | July 13, 2021 |
| Exploit type | webapps |
| Platform | multiple |
| Source update date | July 13, 2021 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.