| Package | Affected versions | Patched versions |
|---|---|---|
| xunfeng | = 0.2.0 |
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free