Lucene search
Ubuntu.comUB:CVE-2011-0696HistoryFeb 14, 2011 - 12:00 a.m.
CVE-2011-0696
2011-02-1400:00:00
ubuntu.com
ubuntu.com
19
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.004
Percentile
73.1%
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate
HTTP requests that contain an X-Requested-With header, which makes it
easier for remote attackers to conduct cross-site request forgery (CSRF)
attacks via forged AJAX requests that leverage a βcombination of browser
plugins and redirects,β a related issue to CVE-2011-0447.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 9.10 | noarch | python-django | <Β 1.1.1-1ubuntu1.2 | UNKNOWN |
| ubuntu | 10.04 | noarch | python-django | <Β 1.1.1-2ubuntu1.3 | UNKNOWN |
| ubuntu | 10.10 | noarch | python-django | <Β 1.2.3-1ubuntu0.2.10.10.2 | UNKNOWN |
| ubuntu | 11.04 | noarch | python-django | <Β 1.2.5-1ubuntu1 | UNKNOWN |
| ubuntu | 11.10 | noarch | python-django | <Β 1.2.5-1ubuntu1 | UNKNOWN |
Related
osv
osv
Moderate severity vulnerability that affects django
2018-07-23 19:51:10
actionpack Cross-Site Request Forgery vulnerability
2017-10-24 18:33:38
PYSEC-2011-10
2011-02-14 21:00:00
gitlab
gitlab
Cross-Site Request Forgery (CSRF)
2017-10-24 00:00:00
Cross-Site Request Forgery
2018-07-23 00:00:00
github
github
actionpack Cross-Site Request Forgery vulnerability
2017-10-24 18:33:38
Cross-site request forgery in Django
2018-07-23 19:51:10
debiancve
debiancve
CVE-2011-0696
2011-02-14 21:00:03
CVE-2011-0447
2011-02-14 21:00:03
prion
prion
Cross site request forgery (csrf)
2011-02-14 21:00:00
Cross site request forgery (csrf)
2011-02-14 21:00:00
cve
cve
CVE-2011-0447
2011-02-14 21:00:03
CVE-2011-0696
2011-02-14 21:00:03
nvd
nvd
CVE-2011-0696
2011-02-14 21:00:03
CVE-2011-0447
2011-02-14 21:00:03
rubygems
rubygems
CSRF Protection Bypass in Ruby on Rails
2017-10-23 21:00:00
ubuntucve
ubuntucve
CVE-2011-0447
2011-02-14 00:00:00
cvelist
cvelist
CVE-2011-0696
2011-02-14 20:00:00
CVE-2011-0447
2011-02-14 20:00:00
openvas
openvas
Mandriva Update for python-django MDVSA-2011:031 (python-django)
2011-02-22 00:00:00
Mandriva Update for python-django MDVSA-2011:031 (python-django)
2011-02-22 00:00:00
Ruby on Rails CSRF Vulnerability
2010-08-02 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : python-django (MDVSA-2011:031)
2011-02-20 00:00:00
Debian DSA-2247-1 : rails - several vulnerabilities
2011-06-10 00:00:00
Fedora 13 : rubygem-actionpack-2.3.5-4.fc13 (2011-2138)
2011-03-07 00:00:00
seebug
seebug
Ruby on Railsθ·¨η«θζ¬ζ§θ‘εθ·¨η«θ―·ζ±δΌͺι ζΌζ΄
2011-04-08 00:00:00
debian
debian
[SECURITY] [DSA 2247-1] rails security update
2011-05-31 19:04:22
[SECURITY] [DSA 2163-1] python-django security update
2011-02-14 18:31:55
[SECURITY] [DSA 2163-2] dajaxice regression fix
2011-03-01 20:17:00
fedora
fedora
[SECURITY] Fedora 14 Update: Django-1.2.5-1.fc14
2011-02-19 01:27:31
[SECURITY] Fedora 14 Update: rubygem-actionpack-2.3.8-3.fc14
2011-03-05 02:39:03
[SECURITY] Fedora 13 Update: rubygem-actionpack-2.3.5-4.fc13
2011-03-05 02:42:18
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-02-15 00:00:00
[SECURITY] [DSA 2163-1] python-django security update
2011-02-15 00:00:00
[SECURITY] [DSA 2247-1] rails security update
2011-06-02 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2011-02-17 00:00:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2014-12-14 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.004
Percentile
73.1%
Related for UB:CVE-2011-0696