Description

Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.

Remediation

References

CVE-2007-4724

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-1999-1223)

Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-2608)

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32028)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-31550)

WordPress Plugin Blue Admin Cross-Site Request Forgery (21.06.01)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2007-4724