CVE-2011-1911

NONECVSS 0.0

0.0

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a brute-force approach.

🔗 References (12)

cret@certhttp://www.csirtcv.gva.es/es/alertas/vulnerabilidad-en-jasperserver.html
cret@certhttp://www.csirtcv.gva.es/sites/all/files/images/content/%5BCSIRT-cv%5D%20JasperServer%203.7.0%20CE%20CSRF%20Advisory.pdf
cret@certhttp://www.kb.cert.org/vuls/id/519588
cret@certhttp://www.kb.cert.org/vuls/id/MAPG-8ELLJC
cret@certhttp://www.securityfocus.com/bid/49649
cret@certhttps://exchange.xforce.ibmcloud.com/vulnerabilities/69849
af854a3a-2127-422b-91ae-364da2661108http://www.csirtcv.gva.es/es/alertas/vulnerabilidad-en-jasperserver.html
af854a3a-2127-422b-91ae-364da2661108http://www.csirtcv.gva.es/sites/all/files/images/content/%5BCSIRT-cv%5D%20JasperServer%203.7.0%20CE%20CSRF%20Advisory.pdf
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/519588
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/MAPG-8ELLJC
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/49649
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/69849

Is Your Infrastructure Affected by CVE-2011-1911?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2011-1911

📅 Published

🔄 Last Modified

🔗 References (12)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2011-1911?