Cross site scripting vulnerabilites

• Key: GERONIMO-1474
• Type: Bug
• Status: Resolved
• Resolution: Fixed
• Priority: Major
• Assignee: Aaron Mulder
• Reporter: Greg Wilkins
• Component/s: console, security
• Affects Version/s: 1.0
• Fix Version/s: 1.1, 1.2

Description

Reported by oliver karow:

The Web-Access-Log viewer does no filtering for html-/script-tags, and
therefore allows attacks against the user of the admin-console:

http://10.10.10.10:8080/jsp-examples/cal/cal2.jsp?time="/><script>alert(document.cookie)</script>

Also reported:

The first one is a classical cross-site scripting in the jsp-examples:
http://10.10.10.10:8080/jsp-examples/cal/cal2.jsp?time="/><script>alert('Gotcha')</script>