CVE-2019-11457

CVE-2019-11457 : The connected Red Hat, OSV and related advisories corroborate multiple CSRF issues in MicroPyramid Django CRM 0.2.1. Affected endpoints include /change-password-by-admin/, /api/settings/add/, /cases/create/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/cr...

CVE-2018-16552

MicroPyramid Django-CRM 0.2 is affected by a CSRF vulnerability in the /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs. The issue is documented across multiple sources (OSV/GHSA/CNVD/NVD) as CSRF for these endpoints. The connected documents do not provide root-cause details beyond ...