{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.1"}],"component":"django-crm","cve_ids":["CVE-2019-11457"],"ecosystem":"PyPI","epss":0.01159,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pg2f-r7pc-6fxx","id":"tcs_01M5KFSYQ8YE9DE7EFZM7KZK0Z","modified_at":"2024-09-16T14:57:58.888560Z","published_at":"2019-09-11T22:57:57Z","references":["https://osv.dev/vulnerability/GHSA-pg2f-r7pc-6fxx","https://nvd.nist.gov/vuln/detail/CVE-2019-11457","https://github.com/MicroPyramid/Django-CRM","https://github.com/advisories/GHSA-pg2f-r7pc-6fxx","https://github.com/pypa/advisory-database/tree/main/vulns/django-crm/PYSEC-2019-174.yaml","https://www.netsparker.com/blog/web-security","http://packetstormsecurity.com/files/154219/Django-CRM-0.2.1-Cross-Site-Request-Forgery.html","http://seclists.org/fulldisclosure/2019/Aug/30"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-pg2f-r7pc-6fxx","url":"https://osv.dev/vulnerability/GHSA-pg2f-r7pc-6fxx"}],"summary":"Cross-Site Request Forgery in MicroPyramid Django CRM"}