Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1nNzdnLXZqam0teDgzas2nEw
Apache Tomcat Example Application CSRF and XSS Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.
Permalink: https://github.com/advisories/GHSA-g77g-vjjm-x83jJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNzdnLXZqam0teDgzas2nEw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 years ago
Updated: 7 months ago
Identifiers: GHSA-g77g-vjjm-x83j, CVE-2007-4724
References:
- https://nvd.nist.gov/vuln/detail/CVE-2007-4724
- https://web.archive.org/web/20070911063436/http://securityreason.com/securityalert/3094
- https://web.archive.org/web/20081006123851/http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html
- https://web.archive.org/web/20200526022330/http://www.securityfocus.com/archive/1/478491/100/0/threaded
- https://github.com/advisories/GHSA-g77g-vjjm-x83j
Affected Packages
maven:org.apache.tomcat:tomcat
Dependent packages: 30Dependent repositories: 438
Downloads:
Affected Version Ranges: <= 4.1.31
No known fixed version
All affected versions: