Description

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.

Remediation

References

CVE-2016-7401

Related Vulnerabilities

MongoDb Other Vulnerability (CVE-2013-2132)

WordPress Plugin Pricing Table by Supsystic Multiple Vulnerabilities (1.8.1)

WordPress Plugin Wholesale Market for WooCommerce Arbitrary File Download (1.0.7)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Cross-Site Request Forgery (4.2.152)

MySQL CVE-2020-14844 Vulnerability (CVE-2020-14844)

Severity

High

Classification

CVE-2016-7401 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities