2 matches found
Debian DSA-3678-1 : python-django - security update
Sergey Bobrov discovered that cookie parsing in Django and Google Analytics interacted such a way that an attacker could set arbitrary cookies. This allows other malicious websites to bypass the Cross-Site Request Forgery CSRF protections built into Django. %NASLMINLEVEL 70300 C Tenable Network...
7.5CVSS7AI score0.05702EPSS
SaveExploits1References3
Debian: Security Advisory (DSA-3678-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
7.5CVSS7.6AI score0.05702EPSS
SaveExploits1References3
20