Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
eclipse-ee4j/servlet-api
main @ a7bcb3f
2
Fixes
0
CVEs
MEDIUM
Peak severity
Highlights
Information Disclosure: 1 prior fix. Scrutinize any change in this area.
api/src/main/java/jakarta/servlet/http/Cookie.java: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: The default implementation of the HTTP TRACE method in HttpServlet previously reflected request headers verbatim back to the client. This behavior facilitated Cross-Site Tracing (XST) attacks, which allow malicious scripts to harvest sensitive credentials, including Authorization and Cookie headers, bypass HttpOnly protections, and compromise active sessions. Future modifications to HTTP method dispatching or logging must preserve the exclusion of sensitive headers.
Privilege Escalation: Class initialization in Cookie performed direct system property lookups without privilege escalation wrappers. In environments utilizing a restrictive Java SecurityManager, this leads to an AccessControlException, preventing application boot or execution. Wrapping system reads in privileged action blocks is critical for runtime compatibility and stability under custom security policies.