virus logo FortiClient Vulnerability

Apache Tomcat CVE-2010-4172 Cross Site Scripting Vulnerability

description-logoDescription

The Manager application used the user provided parameters sort and orderBy directly without filtering thereby permitting cross-site scripting. The CSRF protection, which is enabled by default, prevents an attacker from exploiting this.

affected-products-logoAffected Applications

Apache Tomcat

CVE References

CVE-2010-4172

Other References

http://tomcat.apache.org/security.html
ID 43254
Created Jan 17, 2020
Description
Updated		 Dec 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Linux
Vendor Apache
Patch manual
Application Apache Tomcat