CVE-2007-4724
UnknownEPSS 2.14%
Last modified
CVE-2007-4724 is a vulnerability of currently unknown severity. Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.. EPSS estimates a 2.14% chance of exploitation in the next 30 days.
Description
Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Tomcat | 4.1.31 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4724?
Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.
How severe is CVE-2007-4724?
Severity scoring for CVE-2007-4724 is pending analysis. The EPSS model estimates a 2.14% probability of exploitation in the next 30 days.
How do I fix CVE-2007-4724?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4718Directory traversal vulnerability in inc/lib/language.lib.ph…
- CVE-2007-4719SQL injection vulnerability in read.php in 212cafeBoard 6.30…
- CVE-2007-4720Unspecified vulnerability in the Shared Trace Service in Hit…
- CVE-2007-4721Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2007-4722Multiple stack-based buffer overflows in the Quantum Streami…
- CVE-2007-4723Directory traversal vulnerability in Ragnarok Online Control…
- CVE-2007-4725Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll…
- CVE-2007-4726Directory traversal vulnerability in Web Oddity 0.09b allows…
- CVE-2007-4727Buffer overflow in the fcgi_env_add function in mod_proxy_ba…
- CVE-2007-4730Buffer overflow in the compNewPixmap function in compalloc.c…
- CVE-2007-4731Stack-based buffer overflow in the TMregChange function in T…
- CVE-2007-4732Unspecified vulnerability in the strfreectty function in the…
Are you affected by CVE-2007-4724?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST