TI-2016-06303 CVE-2016-7401 · GHSA-crhm-qpjc-cm64
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a…
Priority MEDIUM 41
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.