Описание
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1.8.7-1ubuntu8 |
| esm-infra-legacy/trusty | not-affected | 1.6.1-2ubuntu0.15 |
| esm-infra/xenial | not-affected | 1.8.7-1ubuntu5.2 |
| precise | released | 1.3.1-4ubuntu1.21 |
| trusty | released | 1.6.1-2ubuntu0.15 |
| trusty/esm | not-affected | 1.6.1-2ubuntu0.15 |
| upstream | released | 1.8.15,1.9.10 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | released | 1.8.7-1ubuntu5.2 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.1 ...
EPSS
5 Medium
CVSS2
7.5 High
CVSS3