CVE-2015-5081
CVE-2015-5081
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors.
CVSS 8.8 · High · EPSS 1.0% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
django-cms PyPI
- Versions
- 2.0.1
- 2.0.2
- 2.1.1
- 2.1.2
- 2.1.3
- 2.1.4
- 2.1.5
- 2.2
- 2.2.1
- 2.3.1
- 2.3.2
- 2.3.3
- 2.3.4
- 2.3.5
- 2.3.6
- 2.3.7
- 2.3.8
- 2.4.0
- 2.4.1
- 2.4.2
- 2.4.3
- 3.0
- 3.0.1
- 3.0.10
- 3.0.11
- 3.0.12
- 3.0.13
- 3.0.2
- 3.0.3
- 3.0.4
- 3.0.5
- 3.0.6
- 3.0.7
- 3.0.8
- 3.0.9
- Affected ranges
- ECOSYSTEM: < 3.0.14
Update to 3.0.14
django-cms PyPI
- Versions
- 3.1.0
- 3.1.0.b1
- 3.1.0rc1
- 3.1.0rc2
- Affected ranges
- ECOSYSTEM: ≥ 3.1.0b1, < 3.1.1
Update to 3.1.1
django-cms PyPI
- Versions
- 2.0.1
- 2.0.2
- 2.1.1
- 2.1.2
- 2.1.3
- 2.1.4
- 2.1.5
- 2.2
- 2.2.1
- 2.3.1
- 2.3.2
- 2.3.3
- 2.3.4
- 2.3.5
- 2.3.6
- 2.3.7
- 2.3.8
- 2.4.0
- 2.4.1
- 2.4.2
- 2.4.3
- 3.0
- 3.0.1
- 3.0.10
- 3.0.11
- 3.0.12
- 3.0.13
- 3.0.2
- 3.0.3
- 3.0.4
- 3.0.5
- 3.0.6
- 3.0.7
- 3.0.8
- 3.0.9
- 3.1.0
- 3.0c2
- 3.0c1
- temporary
- 3.0.0.beta3
- 3.0.0.beta2
- 3.0.0.beta
- 2.4.0.rc1
- show
- 2.3.2.rc1
- 2.3
- 2.3rc1
- 2.1.0
- 2.1.0.rc3
- 2.1.0.rc2
- Affected ranges
- GIT: < f77cbc607d6e2a62e63287d37ad320109a2cc78a
- ECOSYSTEM: < 3.0.14 ∪ ≥ 3.1, < 3.1.1
Update to 3.0.14; Update to 3.1.1