CVE

Id
29185  
CVE No.
CVE-2007-5828  
Status
Candidate  
Description
** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CSRF protection module that is included with the product. However, CVE considers this an issue because the default configuration does not use this module.  
Phase
Assigned (20071105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306173 29185 CVE-2007-5828 BUGTRAQ:20071029 Django 0.96 (stable) Admin Panel CSRF  View
306174 29185 CVE-2007-5828 URL:http://www.securityfocus.com/archive/1/archive/1/482983/100/0/threaded  View
306175 29185 CVE-2007-5828 OSVDB:45285  View
306176 29185 CVE-2007-5828 URL:http://osvdb.org/45285  View
306177 29185 CVE-2007-5828 SREASON:3338  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54181 JVNDB-2007-002873 Avaya MSS および MN の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 Avaya Messaging Storage Server (MSS) および Message Networking (MN) の管理インターフェースには、サービス運用妨害 (DoS) 状態となるの脆弱性が存在します。 CVE-2007-5830 29185 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002873.html  View