PT-2011-3471

Name of the Vulnerable Software and Affected Versions JasperReports Server Community Project versions 3.7.0 through 3.7.1 Description The issue allows remote attackers to conduct cross-site request forgery CSRF attacks via a brute-force approach, due to the use of a predictable flowExecutionKey...