Medium severity5.7NVD Advisory· Published Feb 17, 2017· Updated Jun 17, 2026
CVE-2016-4315
CVE-2016-4315
Description
Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action to server-admin/proxy_ajaxprocessor.jsp.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Patches
Vulnerability mechanics
References
6- docs.wso2.com/display/Security/Security+Advisory+WSO2-2016-0101nvdPatchVendor Advisory
- hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-CSRF-DOS.txtnvdExploitThird Party Advisory
- packetstormsecurity.com/files/138332/WSO2-Carbon-4.4.5-Cross-Site-Request-Forgery-Denial-Of-Service.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/40242/nvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/92473nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/539202/100/0/threadednvd
News mentions
0No linked articles in our index yet.