Vulnerabilities > Jasperforge
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2011-09-20 | CVE-2011-1911 | Cross-Site Request Forgery (CSRF) vulnerability in Jasperforge Jasperreports Server Community Project 3.7.0/3.7.1 JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a brute-force approach. | 6.8 |