[GERONIMO-1540] Fix security vulnerability in jsp-examples

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1, 1.2
• Fix Version/s: 1.1, 1.2
• Component/s: sample apps
• Security Level: public (Regular issues)
• Patch Info: Patch Available
• Assignee: Kevan Lee Miller
• Reporter: Dave Colasurdo
• Created: 26/Jan/06 06:10
• Updated: 07/Aug/06 15:04
• Resolved: 29/Jan/06 02:02

Description

Oliver Karow has reported a cross-site scripting vulnerability in the Tomcat jsp-examples that are included in Geronimo. It fails on both Jetty and Tomcat.

This can be reproduced with the following urls:

http://localhost:8080/jsp-examples/cal/cal2.jsp?time="/><script>alert('Gotcha')</script>
http://localhost:8080/jsp-examples/cal/cal2.jsp?time="/><script>alert(document.cookie)</script>

This JIRA does not address a related problem in the admin console. That problem is addressed in GERONIMO-1474.