| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 0.91.0, < 0.91.3≥ 0.95.0, < 0.95.4≥ 0.96.0, < 0.96.3< 1.1 | 0.91.30.95.40.96.31.1 |
| django | ≥ 0.91, < 0.91.3≥ 0.95, < 0.95.4≥ 0.96, < 0.96.3 | 0.91.30.95.40.96.3 |
The administration application in Django 0.91.x, 0.95.x, and 0.96.x stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free