VULNERABILITY INTELLIGENCE
CVE-2007-4724
CVSS score4.3 MEDIUM
EPSS probability2.14%
CISA KEVNot currently listed
Published2007-09-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)