Lucene search
FreeBSDBB022643-84FB-11E6-A4A1-60A44CE6887BHistorySep 26, 2016 - 12:00 a.m.
django -- CSRF protection bypass on a site with Google Analytics
2016-09-2600:00:00
vuxml.freebsd.org
16
0.008 Low
EPSS
Percentile
81.2%
Django Software Foundation reports:
An interaction between Google Analytics and Django’s cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection.
Related
fedora
fedora
[SECURITY] Fedora 25 Update: python-django-1.9.10-1.fc25
2016-10-10 18:23:59
[SECURITY] Fedora 24 Update: python-django-1.9.10-1.fc24
2016-10-10 21:53:50
[SECURITY] Fedora 23 Update: python-django-1.8.15-1.fc23
2016-10-11 01:21:01
prion
prion
Cross site request forgery (csrf)
2016-10-03 18:59:00
osv
osv
PYSEC-2016-3
2016-10-03 18:59:00
Django CSRF Protection Bypass
2022-05-14 03:55:50
nessus
nessus
FreeBSD : django -- CSRF protection bypass on a site with Google Analytics (bb022643-84fb-11e6-a4a1-60a44ce6887b)
2016-09-28 00:00:00
Debian DSA-3678-1 : python-django - security update
2016-09-27 00:00:00
Fedora 25 : python-django (2016-704e85cac2)
2016-11-15 00:00:00
cve
cve
CVE-2016-7401
2016-10-03 18:59:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0334)
2022-01-28 00:00:00
Fedora Update for python-django FEDORA-2016-3795497354
2016-11-14 00:00:00
Debian: Security Advisory (DLA-649-1)
2023-03-08 00:00:00
ubuntucve
ubuntucve
CVE-2016-7401
2016-09-26 00:00:00
redhat
redhat
(RHSA-2016:2038) Moderate: python-django security update
2016-10-10 05:47:17
(RHSA-2016:2043) Moderate: python-django security update
2016-10-10 05:48:11
(RHSA-2016:2041) Moderate: python-django security update
2016-10-10 05:47:49
mageia
mageia
Updated python-django packages fix security vulnerability
2016-10-04 15:20:54
veracode
veracode
Cross-Site Request Forgery (CSRF) Protection Bypass
2019-01-15 09:13:18
redhatcve
redhatcve
CVE-2016-7401
2016-09-27 00:17:27
archlinux
archlinux
[ASA-201610-13] python-django: cross-site request forgery
2016-10-21 00:00:00
[ASA-201610-12] python2-django: cross-site request forgery
2016-10-21 00:00:00
cvelist
cvelist
CVE-2016-7401
2016-10-03 18:00:00
debian
debian
[SECURITY] [DLA DLA-649-1] python-django security update
2016-10-06 21:23:18
[SECURITY] [DSA 3678-1] python-django security update
2016-09-26 20:56:39
seebug
seebug
Django CSRF Bypass (CVE-2016-7401)
2016-09-29 00:00:00
github
github
Django CSRF Protection Bypass
2022-05-14 03:55:50
debiancve
debiancve
CVE-2016-7401
2016-10-03 18:59:00
ubuntu
ubuntu
Django vulnerability
2016-09-27 00:00:00
altlinux
altlinux