Back to search
CVE-2011-1911
Published: Sep 20, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a brute-force approach.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
jasperreports-flowexecutionkey-csrf(69849)
vdb-entry
x_refsource_XF
VU#519588
third-party-advisory
x_refsource_CERT-VN
http://www.kb.cert.org/vuls/id/MAPG-8ELLJC
x_refsource_CONFIRM
49649
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now