What is GHSA-g77g-vjjm-x83j?

GHSA-g77g-vjjm-x83j is a security advisory published by GitHub Security Advisories with Medium severity. Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Which CVE IDs does GHSA-g77g-vjjm-x83j cover?

GHSA-g77g-vjjm-x83j covers the following CVE IDs: CVE-2007-4724. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-g77g-vjjm-x83j?

GHSA-g77g-vjjm-x83j affects 1 product, including: maven/org.apache.tomcat:tomcat:\u003c= 4.1.31.

GHSA-g77g-vjjm-x83jMedium

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

September 22, 2023

🔗 CVE IDs covered (1)

CVE-2007-4724 →

📋 Description

Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.

🎯 Affected products1

maven/org.apache.tomcat:tomcat:<= 4.1.31

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2007-4724
https://web.archive.org/web/20070911063436/http://securityreason.com/securityalert/3094
https://web.archive.org/web/20081006123851/http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html
https://web.archive.org/web/20200526022330/http://www.securityfocus.com/archive/1/478491/100/0/threaded
https://github.com/advisories/GHSA-g77g-vjjm-x83j