Description

Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.

Remediation

References

CVE-2007-4724

Related Vulnerabilities

WordPress Plugin WordPress OpenID Connect Client Cross-Site Scripting (2.1.4)

Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-3805)

MySQL CVE-2023-22065 Vulnerability (CVE-2023-22065)

MySQL CVE-2014-6507 Vulnerability (CVE-2014-6507)

MySQL CVE-2022-21265 Vulnerability (CVE-2022-21265)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2007-4724