Description
Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".
Remediation
References
Related Vulnerabilities
Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-8156)
Oracle JRE CVE-2014-0453 Vulnerability (CVE-2014-0453)
WordPress Plugin Import XML and RSS Feeds Server-Side Request Forgery (2.0.2)
WordPress Plugin Abandoned Cart Pro for WooCommerce Cross-Site Scripting (7.11.1)
IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2023-38370)