Wind River Support Network

HomeDefectsLIN9-10038
Fixed

LIN9-10038 : Security Advisory - python3-django - CVE-2016-7401

Created: Jun 9, 2020    Updated: Aug 20, 2020
Resolved Date: Jul 30, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.26
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.

 

CVEs


Live chat
Online