Lucene search
MitreCVELIST:CVE-2016-7401HistoryOct 03, 2016 - 6:00 p.m.
CVE-2016-7401
2016-10-0318:00:00
mitre
www.cve.org
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
References
rhn.redhat.com/errata/RHSA-2016-2038.html
rhn.redhat.com/errata/RHSA-2016-2039.html
rhn.redhat.com/errata/RHSA-2016-2040.html
rhn.redhat.com/errata/RHSA-2016-2041.html
rhn.redhat.com/errata/RHSA-2016-2042.html
rhn.redhat.com/errata/RHSA-2016-2043.html
www.debian.org/security/2016/dsa-3678
www.securityfocus.com/bid/93182
www.securitytracker.com/id/1036899
www.ubuntu.com/usn/USN-3089-1
www.djangoproject.com/weblog/2016/sep/26/security-releases/
Related
nessus
nessus
FreeBSD : django -- CSRF protection bypass on a site with Google Analytics (bb022643-84fb-11e6-a4a1-60a44ce6887b)
2016-09-28 00:00:00
Fedora 24 : python-django (2016-5706eeb875)
2016-10-12 00:00:00
Debian DSA-3678-1 : python-django - security update
2016-09-27 00:00:00
cve
cve
CVE-2016-7401
2016-10-03 18:59:13
fedora
fedora
[SECURITY] Fedora 25 Update: python-django-1.9.10-1.fc25
2016-10-10 18:23:59
[SECURITY] Fedora 24 Update: python-django-1.9.10-1.fc24
2016-10-10 21:53:50
[SECURITY] Fedora 23 Update: python-django-1.8.15-1.fc23
2016-10-11 01:21:01
ubuntucve
ubuntucve
CVE-2016-7401
2016-09-26 00:00:00
osv
osv
PYSEC-2016-3
2016-10-03 18:59:00
Django CSRF Protection Bypass
2022-05-14 03:55:50
prion
prion
Cross site request forgery (csrf)
2016-10-03 18:59:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0334)
2022-01-28 00:00:00
Fedora Update for python-django FEDORA-2016-5706eeb875
2016-11-14 00:00:00
Debian Security Advisory DSA 3678-1 (python-django - security update)
2016-09-26 00:00:00
freebsd
freebsd
django -- CSRF protection bypass on a site with Google Analytics
2016-09-26 00:00:00
redhat
redhat
(RHSA-2016:2038) Moderate: python-django security update
2016-10-10 05:47:17
(RHSA-2016:2043) Moderate: python-django security update
2016-10-10 05:48:11
(RHSA-2016:2041) Moderate: python-django security update
2016-10-10 05:47:49
mageia
mageia
Updated python-django packages fix security vulnerability
2016-10-04 15:20:54
archlinux
archlinux
[ASA-201610-13] python-django: cross-site request forgery
2016-10-21 00:00:00
[ASA-201610-12] python2-django: cross-site request forgery
2016-10-21 00:00:00
redhatcve
redhatcve
CVE-2016-7401
2016-09-27 00:17:27
veracode
veracode
Cross-Site Request Forgery (CSRF) Protection Bypass
2019-01-15 09:13:18
debiancve
debiancve
CVE-2016-7401
2016-10-03 18:59:13
seebug
seebug
Django CSRF Bypass (CVE-2016-7401)
2016-09-29 00:00:00
ubuntu
ubuntu
Django vulnerability
2016-09-27 00:00:00
debian
debian
[SECURITY] [DLA DLA-649-1] python-django security update
2016-10-06 21:23:18
[SECURITY] [DSA 3678-1] python-django security update
2016-09-26 20:56:23
nvd
nvd
CVE-2016-7401
2016-10-03 18:59:13
github
github
Django CSRF Protection Bypass
2022-05-14 03:55:50
altlinux
altlinux