Skip to content

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Moderate severity GitHub Reviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Sep 22, 2023

Package

maven org.apache.tomcat:tomcat (Maven)

Affected versions

<= 4.1.31

Patched versions

None

Description

Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.

References

Published by the National Vulnerability Database Sep 5, 2007
Published to the GitHub Advisory Database May 1, 2022
Reviewed Sep 22, 2023
Last updated Sep 22, 2023

Severity

Moderate

EPSS score

0.851%
(82nd percentile)

Weaknesses

CVE ID

CVE-2007-4724

GHSA ID

GHSA-g77g-vjjm-x83j

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.