tomcat-cookie-exposed: Tomcat Cookie Exposed

日期: 2025-08-01 | 影响软件: Tomcat | POC: 已公开

漏洞描述

Tomcat Cookie is exposed.

PoC代码[已公开]

id: tomcat-cookie-exposed

info:
  name: Tomcat Cookie Exposed
  author: tess,dk999
  severity: low
  description: Tomcat Cookie is exposed.
  reference:
    - https://medium.com/bugbountywriteup/apache-example-servlet-leads-to-61a2720cac20
  metadata:
    verified: true
    max-request: 1
  tags: misconfig,apache,tomcat,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/examples/servlets/servlet/CookieExample"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Cookies Example"
          - "Your browser is sending the following cookies:"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100d2aa056494b62b609ba1d04b604ba782f4578e0de447a10318141cd4bde9ec19022100d847a48e8fd53664036747aa72b8a2741bc0e01feb88e9b5f55605a23b1a80cf:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/tomcat-cookie-exposed.yaml

漏洞描述

PoC代码[已公开]

相关漏洞推荐