{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.2.1"}],"component":"django-crm","cve_ids":["CVE-2019-11457"],"ecosystem":"PyPI","epss":0.01159,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pg2f-r7pc-6fxx","id":"tcs_01M5KG8RQ1DK9P91T831K94MNV","modified_at":"2023-11-08T04:01:01.762102Z","published_at":"2019-08-27T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-174","https://www.netsparker.com/blog/web-security/","http://packetstormsecurity.com/files/154219/Django-CRM-0.2.1-Cross-Site-Request-Forgery.html","http://seclists.org/fulldisclosure/2019/Aug/30","https://github.com/advisories/GHSA-pg2f-r7pc-6fxx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-174","url":"https://osv.dev/vulnerability/PYSEC-2019-174"}],"summary":"Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /document"}