Описание
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1.8.7-1ubuntu8 |
| esm-infra-legacy/trusty | released | 1.6.1-2ubuntu0.15 |
| esm-infra-legacy/xenial | released | 1.8.7-1ubuntu5.2 |
| esm-infra/xenial | released | 1.8.7-1ubuntu5.2 |
| precise | released | 1.3.1-4ubuntu1.21 |
| trusty | released | 1.6.1-2ubuntu0.15 |
| trusty/esm | released | 1.6.1-2ubuntu0.15 |
| upstream | released | 1.8.15,1.9.10 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.1 ...
ALT-PU-2016-2173: package `python-module-django` update to version 1.8.15-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3