Riskcovery

CVE-2022-34305

XSS in examples web application

State
Published
Severity
Not scored
Published
Jun 23, 2022
Updated
Oct 8, 2026
Reserved
Jun 22, 2022

Read the record on cve.org

Description

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

ProductVersions
Apache TomcatApache Software Foundation
  • Apache Tomcat 8.5 8.5.50 to 8.5.81Affected
  • Apache Tomcat 9 9.0.30 to 9.0.64Affected
  • Apache Tomcat 10.0 10.0.0-M1 to 10.0.22Affected
  • Apache Tomcat 10.1 10.1.0-M1 to 10.1.0-M16Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.