CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2022/05/01 6:26 p.m.•57 views

GHSA-G77G-VJJM-X83J Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...

4.3CVSS6.8AI score0.02135EPSS

SaveExploits0References4

Github Security Blog•added 2022/05/01 6:26 p.m.•53 views

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

4.3CVSS7.1AI score0.02135EPSS

SaveExploits0References5Affected Software1

CVE•added 2007/09/05 7:00 p.m.•90 views

CVE-2007-4724

CVE-2007-4724 describes a CSRF vulnerability in the Apache Tomcat calendar examples app, specifically in the file cal2.jsp of the calendar example. The issue allows a remote attacker to add events as arbitrary users by supplying the time and description parameters, enabling unauthorized calendar ...

4.3CVSS6.9AI score0.02135EPSS

SaveExploits0References4Affected Software1

Rapid7 Vulnerability Database (full)•added 2007/09/05 12:00 a.m.•10 views

CVE-2007-4724: Cross-Site Request Forgery (CSRF)

4.3CVSS6AI score0.02135EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by