high8.8
CVE-2018-16552
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.
Impact
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Micropyramid | Django Crm | Version 0.2 |