Description
Important: Bypass of CSRF prevention filter CVE-2012-4431
The CSRF prevention filter could be bypassed if a request was made to a protected resource without a session identifier present in the request.
Affected Apache Tomcat versions (7.0.0 - 7.0.31).
Remediation
Upgrade to the latest version of Apache Tomcat.
References
Related Vulnerabilities
WordPress Plugin W3 Total Cache Multiple Unspecified Vulnerabilities (0.9.5.1)
WordPress Plugin Elementor Pro Cross-Site Scripting (2.0.9)
WordPress Plugin Easy Updates Manager Privilege Escalation (8.0.4)
WordPress Plugin OneSignal-Web Push Notifications Cross-Site Scripting (1.17.7)
WordPress Plugin bodi0`s Bots visits counter Cross-Site Scripting (0.8.1)