A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Tomcat | Apache | 3.2.1 (including) | 3.2.1 (including) |