https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:27:51.670136+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2015-5351 CVE-2015-5351 2026-10-04T09:27:51.672650+00:00

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.