ByteOS Network

NVD Vulnerability Details :

CVE-2008-3909

Modified

Source-cve@mitre.org

Published At-04 Sep, 2008 | 17:41

Updated At-08 Mar, 2011 | 03:11

The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.8	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:P

CPE Matches

django_project>>django>>0.91

cpe:2.3:a:django_project:django:0.91:*:*:*:*:*:*:*

django_project>>django>>0.95

cpe:2.3:a:django_project:django:0.95:*:*:*:*:*:*:*

django_project>>django>>0.96

cpe:2.3:a:django_project:django:0.96:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-352	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/47906	cve@mitre.org	N/A
http://secunia.com/advisories/31837	cve@mitre.org	N/A
http://secunia.com/advisories/31961	cve@mitre.org	N/A
http://www.debian.org/security/2008/dsa-1640	cve@mitre.org	N/A
http://www.djangoproject.com/weblog/2008/sep/02/security/	cve@mitre.org	Patch
http://www.openwall.com/lists/oss-security/2008/09/03/4	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/2533	cve@mitre.org	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=460966	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History