Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Description

References

• nvd.nist.gov/vuln/detail/CVE-2007-4724 · ADVISORY
• web.archive.org/web/20070911063436/http://securityreason.com/securityalert/3094 · WEB
• web.archive.org/web/20081006123851/http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html · WEB
• web.archive.org/web/20200526022330/http://www.securityfocus.com/archive/1/478491/100/0/threaded · WEB
• archives.neohapsis.com/archives/bugtraq/2007-09/0040.html
• osvdb.org/41029
• securityreason.com/securityalert/3094
• securityfocus.com/archive/1/478491/100/0/threaded

More vulnerabilities in org.apache.tomcat:tomcat

• CVE-2026-68525CRITICAL 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-65905CRITICAL 9.8Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made…
• CVE-2026-65182CRITICAL 9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a lo…
• CVE-2026-43515CRITICAL 9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This i…
• CVE-2026-43514LOW 3.7Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 th…