CVE-2008-3909

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication…

published September 4, 2008

CVSS
—
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00931 · 60.0th percentile
Published
2008-09-04T17:00Z
EPSS history
Timeline
  • 04 SEP 17:00Z
    The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication…
    cvelistv5