Debian Security Advisory DSA 1640-1 (python-django)

The remote host is missing an update to python-django announced via advisory DSA 1640-1. OpenVAS Vulnerability Test $Id: deb16401.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1640-1 python-django Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

Debian: Security Advisory (DSA-1640-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1640-1 : python-django - several vulnerabilities

Simon Willison discovered that in Django, a Python web framework, the feature to retain HTTP POST data during user reauthentication allowed a remote attacker to perform unauthorized modification of data through cross site request forgery. This is possible regardless of the Django plugin to preven...

[SECURITY] [DSA 1640-1] New python-django packages fix cross site request forgery

------------------------------------------------------------------------ Debian Security Advisory DSA-1640-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 20, 2008 http://www.debian.org/security/faq -...

DSA-1640-1 python-django - cross site request forgery

Bulletin has no description...

[SECURITY] Fedora 9 Update: Django-0.96.3-1.fc9

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 8 Update: Django-0.96.3-1.fc8

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Fedora 9 : Django-0.96.3-1.fc9 (2008-7672)

Update to upstream version 0.96.3 that fixes cross-site request forgery CSRF issue that may occur after user re-authentication after expiration of current session: http://www.djangoproject.com/weblog/2008/sep/02/security/ This issue also affected deployments with Django's bundled CSRF-protection...

Fedora 8 : Django-0.96.3-1.fc8 (2008-7288)

Update to upstream version 0.96.3 that fixes cross-site request forgery CSRF issue that may occur after user re-authentication after expiration of current session: http://www.djangoproject.com/weblog/2008/sep/02/security/ This issue also affected deployments with Django's bundled CSRF-protection...

[ MDVSA-2008:185 ] python-django

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:185 http://www.mandriva.com/security/ Package : python-django Date : September 3, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: A cross-site request forgery vulnerability was discovered in Djang...

CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

PYSEC-2008-2

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

Cross site request forgery (csrf)

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

PYSEC-2008-2

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

DEBIAN-CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

CVE-2008-3909

Django CSRF issue (CVE-2008-3909) in the admin app affects Django 0.91.x, 0.95.x, and 0.96.x where unauthenticated POST data is stored and later processed after authentication, enabling remote CSRF attacks that can delete or modify data via unspecified requests. Connected sources (GHSA, Debian/Ne...

CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...

CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...