Description
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | django-crm | <= 0.2 | — | GHSA-hq4r-47qc-3jhc |
| PyPI | django-crm | all versions | — | PYSEC-2018-65 |