Description
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.
Remediation
References
Related Vulnerabilities
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.9)
Apache HTTP Server CVE-2019-0190 Vulnerability (CVE-2019-0190)
WordPress Plugin WP-BlipBot Cross-Site Scripting (3.0.9)
WordPress Plugin myCred-Points, Rewards, Gamification, Ranks, Badges & Loyalty SQL Injection (2.2)
PostgreSQL Improper Access Control Vulnerability (CVE-2016-0768)