NetSight
IP …
medium5.8

CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occu…

Impact

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.

Affected products

VendorProductAffected versions
DjangoprojectDjango
from 0.91 before 0.91.3
from 0.95 before 0.95.4
from 0.96 before 0.96.3

Weakness classification

CWE-352

References