Vulnerability Details : CVE-2007-4724
Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.
Vulnerability category: Cross-site request forgery (CSRF)
Products affected by CVE-2007-4724
- cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*
Threat overview for CVE-2007-4724
Top countries where our scanners detected CVE-2007-4724
Top open port discovered on systems with this issue
80
IPs affected by CVE-2007-4724 132
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2007-4724!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2007-4724
0.85%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2007-4724
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2007-4724
-
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.Assigned by: nvd@nist.gov (Primary)
Vendor statements for CVE-2007-4724
-
Apache 2007-09-06This name is a duplicate of CVE-2006-7196. This issue was fixed in Apache Tomcat 4.1.32 and 5.5.16.
References for CVE-2007-4724
Jump to