CVE-2011-1911

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, which makes it easier for remote…

published September 20, 2011

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a brute-force approach.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01491 · 73.8th percentile
Published
2011-09-20T10:00Z
EPSS history
Timeline
  • 20 SEP 10:00Z
    JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, which makes it easier for remote…
    cvelistv5