CVE-2007-3385

CVE-2007-3385 describes a vulnerability in Apache Tomcat versions 3.3 through 6.0.13 where improper handling of the " character in cookie values can lead to information disclosure. This flaw allows remote attackers to potentially leak sensitive data, such as session IDs, and facilitate session hijacking. With a CVSS score of 4.3 (medium severity) and an EPSS score indicating higher exploitability than 80% of CVEs, the vulnerability requires moderate attack complexity but does not involve authentication. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.