Debian/python-django: high 7.5
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting a
Action: Upgrade python-django to 1:1.10-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.10-1 | - |
Fixed versions
| 1:1.10-1 |
Sources
published · modified · JSON