All Questions
3 questions
0
votes
0
answers
910
views
Vulnerable Apache Tomcat server
I am a bug bounty hunter. When doing some research, I found a subdomain that is using Apache Tomcat. Talk about Tomcat, there was a vulnerability found in 2017: CVE-2017-12617.
Any Apache Tomcat ...
2
votes
1
answer
1k
views
Sanitize 3rd party XSS post in Java API
We have some RESTful API services that we have been using for several years. Recently we have started considering surfacing these to 3rd party clients so they can write their own UIs and we can work ...
- 21
1
vote
1
answer
198
views
What are the implication of having Apache Tomcat servlets available publicly?
While testing a website which had Apache Tomcat running, I came across a directory called "Examples" which contained "Servlet Examples", "JSP Examples" and "Websocket Examples".
What do you think are ...
- 397