Security Advisory

CVE-2010-3082

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-09-14 18:00:00
Last updated 2024-08-07 02:55:46
Assigner redhat
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.