Debian/python-django: unknown

Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: thi

Action: Upgrade python-django to 1.2.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-5828#Debian:13/python-django
• https://security-tracker.debian.org/tracker/CVE-2007-5828

published 2007-11-05T19:46:00Z · modified 2026-10-21T17:47:49.298300509Z · JSON