CVE-2008-3909

2008-09-04T17:41:00
ID CVE-2008-3909
Type cve
Reporter cve@mitre.org
Modified 2011-03-08T03:11:00

Description

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.