Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11068
HistoryJan 15, 2019 - 8:56 a.m.

Cross-site Request Forgery (CSRF)

2019-01-1508:56:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20

EPSS

0.001

Percentile

47.6%

org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.

References