~ / search / GHSA-w7cg-5969-678w

GHSA-w7cg-5969-678w

Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token

Source: GitHub Advisory Database (reviewed) High CVE-2015-5351

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.tomcat:tomcat < 7.0.68 7.0.68
Maven org.apache.tomcat:tomcat >= 8.0.0, < 8.0.31 8.0.31
Maven org.apache.tomcat:tomcat >= 9.0.0.M0, < 9.0.0.M2 9.0.0.M2

Details

As written in the advisory (Markdown source, shown as plain text).

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.

References

External links from the advisory. They lead to third-party sites.