CVEvulnerability
CVE-2007-4724
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.
Affected configurations
• apache tomcat 4.1.31
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html archives.neohapsis.com
- http://osvdb.org/41029 osvdb.org
- http://securityreason.com/securityalert/3094 securityreason.com
- http://www.securityfocus.com/archive/1/478491/100/0/threaded www.securityfocus.com
- http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html archives.neohapsis.com
- http://osvdb.org/41029 osvdb.org
- http://securityreason.com/securityalert/3094 securityreason.com
- http://www.securityfocus.com/archive/1/478491/100/0/threaded www.securityfocus.com