CVE-2026-50229 Apache Tomcat: XSS in number guess example

Descrizione del produttore (in inglese)

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.

Dati di riferimento

Produttore

Apache Software Foundation

Prodotti interessati

• Apache Tomcat

CVSS 3.1

6.1 (MEDIUM)

Vettore

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tipo di debolezza

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Pubblicata

29 giugno 2026

Fonti ufficiali

• CVE.org
• NVD
• Advisory del produttore

← Tutte le vulnerabilità