Description

org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.

Remediation

References

CVE-2012-4431

Related Vulnerabilities

WordPress Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2020-4050)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2933)

WordPress Plugin Best Image Gallery & Responsive Photo Gallery-FooGallery Cross-Site Scripting (1.8.14)

WordPress Plugin Xorbin Analog Flash Clock Cross-Site Scripting (1.0)

Liferay Portal Insufficiently Protected Credentials Vulnerability (CVE-2021-29043)

Severity

Medium

Classification

CVE-2012-4431 CWE-264

Tags

Missing Update Known Vulnerabilities