{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.1.31"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2007-4724"],"ecosystem":"Maven","epss":0.02135,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g77g-vjjm-x83j","id":"tcs_01M5N8XN4SGT8R63MMBYQHA4RM","modified_at":"2023-11-08T03:56:48.430184Z","published_at":"2022-05-01T18:26:30Z","references":["https://osv.dev/vulnerability/GHSA-g77g-vjjm-x83j","https://nvd.nist.gov/vuln/detail/CVE-2007-4724","https://web.archive.org/web/20070911063436/http://securityreason.com/securityalert/3094","https://web.archive.org/web/20081006123851/http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html","https://web.archive.org/web/20200526022330/http://www.securityfocus.com/archive/1/478491/100/0/threaded"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-g77g-vjjm-x83j","url":"https://osv.dev/vulnerability/GHSA-g77g-vjjm-x83j"}],"summary":"Apache Tomcat Example Application CSRF and XSS Vulnerabilities"}