Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.12 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.0613EPSS
SaveExploits1References4
Rows per page
Query Builder