CVE-2008-3909

2008-09-04T13:41:00
ID CVE-2008-3909
Type cve
Reporter NVD
Modified 2011-03-07T22:11:37

Description

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.