Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21388
HistoryAug 28, 2019 - 2:55 a.m.

Cross-Site Request Forgery (CSRF)

2019-08-2802:55:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.003 Low

EPSS

Percentile

69.4%

django-crm is vulnerable to cross-site request forgery (CSRF). The server does not verify the authenticity of requests and allows a remote attacker to submit requests on behalf of the users when users are tricked into visiting a malicious web page.

CPENameOperatorVersion
django-crmle0.9.0

0.003 Low

EPSS

Percentile

69.4%