CVE-2019-0221: XSS
Apache Tomcat is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the SSI printenv command. A remote attacker could exploit this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Other sources
The SSI printenv command echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.
Reference: http://tomcat.apache.org/security-9.html
Upstream commit: https://github.com/apache/tomcat/commit/15fcd16
— Red Hat
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2019-0221?
CVE-2019-0221 is a vulnerability in the printenv command in Apache Tomcat 7.0.0 to 7.0.93, 8.5.0 to 8.5.39, and 9.0.0.M1 to 9.0.0.17 that allows for cross-site scripting (XSS) attacks.
How severe is CVE-2019-0221?
The severity of CVE-2019-0221 is rated as medium.
What is the affected software for CVE-2019-0221?
The affected software versions are Apache Tomcat 7.0.0 to 7.0.93, 8.5.0 to 8.5.39, and 9.0.0.M1 to 9.0.0.17.
How can I fix CVE-2019-0221?
To fix CVE-2019-0221, update your Apache Tomcat installation to version 7.0.94, 8.5.40, or 9.0.18 or later.
Where can I find more information about CVE-2019-0221?
You can find more information about CVE-2019-0221 on the Apache Tomcat security page and the GitHub commit page.