Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ΠšΠΎΠ»ΠΈΡ‡Π΅ΡΡ‚Π²ΠΎ 4

ΠšΠΎΠ»ΠΈΡ‡Π΅ΡΡ‚Π²ΠΎ 4

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2011-4140

ΠΏΠΎΡ‡Ρ‚ΠΈ 15 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.

CVSS2: 6.8
EPSS: Низкий
nvd Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2011-4140

ΠΏΠΎΡ‡Ρ‚ΠΈ 15 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.

CVSS2: 6.8
EPSS: Низкий
debian Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2011-4140

ΠΏΠΎΡ‡Ρ‚ΠΈ 15 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x throug ...

CVSS2: 6.8
EPSS: Низкий
github Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

GHSA-h95j-h2rv-qrg4

ΠΎΠΊΠΎΠ»ΠΎ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Django Cross-Site Request Forgery vulnerability

CVSS3: 7.5
EPSS: Низкий

УязвимостСй Π½Π° страницу

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ
CVSS
EPSS
ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ
ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ
CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.

CVSS2: 6.8
1%
Низкий
ΠΏΠΎΡ‡Ρ‚ΠΈ 15 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄
nvd Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ
CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.

CVSS2: 6.8
1%
Низкий
ΠΏΠΎΡ‡Ρ‚ΠΈ 15 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄
debian Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ
CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x throug ...

CVSS2: 6.8
1%
Низкий
ΠΏΠΎΡ‡Ρ‚ΠΈ 15 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄
github Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ
GHSA-h95j-h2rv-qrg4

Django Cross-Site Request Forgery vulnerability

CVSS3: 7.5
1%
Низкий
ΠΎΠΊΠΎΠ»ΠΎ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

УязвимостСй Π½Π° страницу

exploitDog - КомплСксноС Ρ€Π΅ΡˆΠ΅Π½ΠΈΠ΅ для обнаруТСния, ΠΎΡ†Π΅Π½ΠΊΠΈ ΠΈ устранСния уязвимостСй.