GCVE-110-MAGEIA-2016-334

Advisory Published

Vulnetix · Advisory published October 4, 2016

CVE-2016-7401: CSRF protection bypass on a site with Google Analytics An interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-django	1.8.15-1.mga5 (unaffected), 0 (affected)	—

Aliases

CVE-2016-7401

References

Updated python-django packages fix security vulnerability

advisory

Updated python-django packages fix security vulnerability

issue

Updated python-django packages fix security vulnerability

issue

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON