PT-2011-3471

Name of the Vulnerable Software and Affected Versions JasperReports Server Community Project versions 3.7.0 through 3.7.1 Description The issue allows remote attackers to conduct cross-site request forgery CSRF attacks via a brute-force approach, due to the use of a predictable flowExecutionKey...

CVE-2011-1911: Cross-Site Request Forgery (CSRF)

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via a brute-force approach...