https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:47:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-137613 EUVD-2026-137613 https://cve.radiocsirt.org/vuln/euvd-2026-137613 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5828 <p>Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CSRF protection module that is included with the product. However, CVE considers this an issue because the default configuration does not use this module</p> <p>Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CSRF protection module that is included with the product. However, CVE considers this an issue because the default configuration does not use this module</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-5828 https://cve.radiocsirt.org/vuln/ghsa-pjc8-j97x-hp3p <p>** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CSRF protection module that is included with the product. However, CVE considers this an issue because the default configuration does not use this module.</p> <p>** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CSRF protection module that is included with the product. However, CVE considers this an issue because the default configuration does not use this module.</p> https://cve.radiocsirt.org/vuln/ghsa-pjc8-j97x-hp3p https://cve.radiocsirt.org/vuln/gsd-2007-5828 gsd-2007-5828 https://cve.radiocsirt.org/vuln/gsd-2007-5828