Lucene search
+L

3 matches found

OSV
OSV
added 2022/05/01 6:26 p.m.26 views

GHSA-G77G-VJJM-X83J Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...

4.3CVSS6.8AI score0.02135EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/05/01 6:26 p.m.40 views

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...

4.3CVSS7.1AI score0.02135EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2007/09/05 7:0 p.m.71 views

CVE-2007-4724

CVE-2007-4724 describes a CSRF vulnerability in the Apache Tomcat calendar examples app, specifically in the file cal2.jsp of the calendar example. The issue allows a remote attacker to add events as arbitrary users by supplying the time and description parameters, enabling unauthorized calendar ...

4.3CVSS6.9AI score0.02135EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder