Threats tagged 'bit-tomcat-2026-50229'

A cross-site scripting (XSS) vulnerability exists in the number guess example application of Apache Tomcat. This vulnerability is due to improper neutralization of script-related HTML tags, allowing an attacker to inject malicious scripts. The issue affects multiple versions of Apache Tomcat, including versions from 7.0.0 through 7.0.109, 8.5.0 through 8.5.100, 9.0.0.M1 through 9.0.118, 10.1.0-M1 through 10.1.55, and 11.0.0-M1 through 11.0.22. Fixed versions have been released, and users are advised to upgrade to 11.0.23, 10.1.56, or 9.0.119 or later to remediate the issue. The vulnerability has a CVSS score of 6.1 (medium severity).