.. / CVE-2019-0221

Exploit for Apache Tomcat - Cross-Site Scripting (CVE-2019-0221)

Description:

Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39, and 7.0.0 to 7.0.93 are vulnerable to cross-site scripting because the SSI printenv command echoes user provided data without escaping. Note: SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.

Nuclei Template

View the template here CVE-2019-0221.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-0221.yaml
Copy

References:

https://seclists.org/fulldisclosure/2019/May/50
https://nvd.nist.gov/vuln/detail/CVE-2019-0221
https://www.exploit-db.com/exploits/50119
https://wwws.nightwatchcybersecurity.com/2019/05/27/xss-in-ssi-printenv-command-apache-tomcat-cve-2019-0221/
https://lists.apache.org/thread.html/6e6e9eacf7b28fd63d249711e9d3ccd4e0a83f556e324aee37be5a8c@%3Cannounce.tomcat.apache.org%3E