GitHub Advisoryadvisory · Maven

GHSA-g77g-vjjm-x83j Apache Tomcat Example Application CSRF and XSS Vulnerabilities

MEDIUM Published 2022-05-01 Modified 2023-09-22 Official page ↗
Aliases
CVE-2007-4724
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-352
Reviewed
2023-09-22

Affected packages

• Maven org.apache.tomcat:tomcat: <= 4.1.31 (no fix yet)

Description

Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.

Related

Alias · CVE (1)

  • CVE-2007-4724 Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References