Description

Important: Bypass of CSRF prevention filter CVE-2012-4431

The CSRF prevention filter could be bypassed if a request was made to a protected resource without a session identifier present in the request.

Affected Apache Tomcat versions (7.0.0 - 7.0.31).

Remediation

Upgrade to the latest version of Apache Tomcat.

References

CVE-2012-4431

Apache Tomcat 7.x vulnerabilities

Related Vulnerabilities

WordPress Plugin Cookiebot-GDPR/CCPA Compliant Cookie Consent and Control Cross-Site Scripting (3.6.0)

WordPress 4.2.x Same Origin Method Execution (SOME) Vulnerability (4.2 - 4.2.7)

Drupal Core Security Bypass (8.0.0 - 9.1.15)

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Unspecified Vulnerability (5.1.2)

WordPress Plugin Uji Countdown Cross-Site Scripting (2.2)

Severity

Medium

Classification

CVE-2012-4431 CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Configuration Missing Update