Description
Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | django-cms | < 3.0.14 | 3.0.14 | GHSA-2pqc-gv8q-pvqv |
| PyPI | django-cms | >= 3.1.0b1, < 3.1.1 | 3.1.1 | GHSA-2pqc-gv8q-pvqv |
| PyPI | django-cms | < 3.0.14 · >= 3.1, < 3.1.1 | 3.0.14, 3.1.1 | PYSEC-2017-11 |