CVE-2012-4431EPSS p95.2%

CVE-2012-4431CVE-2012-4431

apache / tomcat

Description

org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.

Scoring

CVSS 4.3 ()
VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS9.15% probability of exploitation · percentile 95.2% · 2026-10-10T12:00:23Z
Last modified2026-10-09
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.