NVD

Id
3771  
Name
CVE-2008-3909  
Description
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-04  
Modified Date
2011-03-07  
Seq
2008-3909  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23861 3771 CVE-2008-3909 DSA-1640  View
23862 3771 CVE-2008-3909 http://www.djangoproject.com/weblog/2008/sep/02/security/  View
23863 3771 CVE-2008-3909 [oss-security] 20080903 django CSRF vuln  View
23864 3771 CVE-2008-3909 ADV-2008-2533  View
23865 3771 CVE-2008-3909 https://bugzilla.redhat.com/show_bug.cgi?id=460966  View
23866 3771 CVE-2008-3909 FEDORA-2008-7288  View
23867 3771 CVE-2008-3909 FEDORA-2008-7672  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48093 JVNDB-2008-003403 Django の管理アプリケーションにおけるデータを削除される脆弱性 Django の管理アプリケーションは、認証後に未認証のまま格納された HTTP POST リクエストを処理をするため、データを削除される、または変更される脆弱性が存在します。 CVE-2008-3909 34022 CVE-2008-3909 3771 5.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003403.html 2008-09-04 2012-06-26 View