CVE-2019-11457

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

EUVD-2019-0031

Malware in sbrugna...

GHSA-HQ4R-47QC-3JHC MicroPyramid Django-CRM CSRF

MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users//edit/, and /accounts//delete/ URIs...

MicroPyramid Django-CRM CSRF

MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users//edit/, and /accounts//delete/ URIs...

GHSA-PG2F-R7PC-6FXX Cross-Site Request Forgery in MicroPyramid Django CRM

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

Cross-Site Request Forgery in MicroPyramid Django CRM

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

CVE-2019-11457

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

CVE-2019-11457

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

PYSEC-2019-174

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

Cross site request forgery (csrf)

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

PYSEC-2019-174

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

CVE-2019-11457

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

CVE-2019-11457

CVE-2019-11457 : The connected Red Hat, OSV and related advisories corroborate multiple CSRF issues in MicroPyramid Django CRM 0.2.1. Affected endpoints include /change-password-by-admin/, /api/settings/add/, /cases/create/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/cr...

MicroPyramid Django CRM CVE-2019-11457 Multiple Cross Site Request Forgery Vulnerabilities

Description MicroPyramid Django CRM is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. MicroPyramid Django CRM version 0.2.1 is vulnerable...

MicroPyramid Django-CRM Cross-Site Request Forgery Vulnerability

MicroPyramid Django-CRM is an open source customer relationship management system CRM based on the Django framework . A cross-site request forgery vulnerability exists in the /users/create/, /users//edit/, and /accounts//delete/ URIs in MicroPyramid Django-CRM version 0.2. A remote attacker can...

CVE-2018-16552

MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users//edit/, and /accounts//delete/ URIs...

CVE-2018-16552

MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users//edit/, and /accounts//delete/ URIs...

PYSEC-2018-65

MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users//edit/, and /accounts//delete/ URIs...

Cross site request forgery (csrf)

MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users//edit/, and /accounts//delete/ URIs...

CVE-2018-16552

MicroPyramid Django-CRM 0.2 is affected by a CSRF vulnerability in the /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs. The issue is documented across multiple sources (OSV/GHSA/CNVD/NVD) as CSRF for these endpoints. The connected documents do not provide root-cause details beyond ...