Lucene search

K
mageiaGentoo FoundationMGASA-2016-0334
HistoryOct 04, 2016 - 3:20 p.m.

Updated python-django packages fix security vulnerability

2016-10-0415:20:54
Gentoo Foundation
advisories.mageia.org
5

0.008 Low

EPSS

Percentile

81.2%

CVE-2016-7401: CSRF protection bypass on a site with Google Analytics An interaction between Google Analytics and Django’s cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection.

OSVersionArchitecturePackageVersionFilename
Mageia5noarchpython-django< 1.8.15-1python-django-1.8.15-1.mga5