Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django Login Form 跨站脚本攻击漏洞
Vulnerability Description
Django是一个开放源代码的Web应用框架，由Python写成。 Django 0.91,0.95,和0.96版本中的管理应用程序在成功授权后储存未授权的HTTP POST请求并对它们进行处理。这会允许远程攻击者通过提交未明请求来触发跨站请求伪造攻击和删除或修改数据。
CVSS Information
N/A
Vulnerability Type
N/A