django: cross-site request forgery
| Package(s): | django | CVE #(s): | |||||||||||||
| Created: | September 4, 2008 | Updated: | September 10, 2008 | ||||||||||||
| Description: | From the Mandriva alert: A cross-site request forgery vulnerability was discovered in Django that, if exploited, could be used to perform unrequested deletion or modification of data. Updated versions of Django will now discard posts from users whose sessions have expired, so data will need to be re-entered in these cases. | ||||||||||||||
| Alerts: |
| ||||||||||||||