VDB
Sign up
—

PYSEC-2018-65

Details

MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/django-crm
Introduced in: 0

No fixed version published yet for django-crm (pip). Pin to a known-safe version or switch to an alternative.

References