Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-7401
5
MEDIUMCVSS v2
Published
October 3, 2016
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.9.6, = 1.9.9, <= 1.8.14, = 1.9.0, = 1.9.5, = 1.9.3, = 1.9.4, = 1.9.7, = 1.9.1, = 1.9.2, = 1.9.8, < 1.8.15, >= 1.9, < 1.9.10NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.9.6, = 1.9.9, <= 1.8.14, = 1.9.0, = 1.9.5, = 1.9.3, = 1.9.4, = 1.9.7, = 1.9.1, = 1.9.2, = 1.9.8, < 1.8.15, >= 1.9, < 1.9.10NVD
Docker Hub
NPM