CVE-2008-3909
04.09.2008, 17:41
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| djangoproject | django | 0.91 ≤ 𝑥 < 0.91.3 |
| djangoproject | django | 0.95 ≤ 𝑥 < 0.95.4 |
| djangoproject | django | 0.96 ≤ 𝑥 < 0.96.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References