CVE-2015-5081

Advisory

Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors.


MLIST:[oss-security] 20150628 Re: CVE Request: Django CMS: http://www.openwall.com/lists/oss-security/2015/06/28/1
CONFIRM:https://github.com/divio/django-cms/commit/f77cbc607d6e2a62e63287d37ad320109a2cc78a: https://github.com/divio/django-cms/commit/f77cbc607d6e2a62e63287d37ad320109a2cc78a
CONFIRM:https://www.django-cms.org/en/blog/2015/06/27/311-3014-release/: https://www.django-cms.org/en/blog/2015/06/27/311-3014-release/

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5081
• https://www.django-cms.org/en/blog/2015/06/27/311-3014-release/
• https://github.com/divio/django-cms/commit/f77cbc607d6e2a62e63287d37ad320109a2cc78a
• http://www.openwall.com/lists/oss-security/2015/06/28/1