CVE-2016-7401

Name of the Vulnerable Software and Affected Versions Django versions prior to 1.8.15 Django versions 1.9.x prior to 1.9.10

Description The issue allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies, specifically when used on a site with Google Analytics.

Recommendations For Django versions prior to 1.8.15, update to version 1.8.15 or later. For Django versions 1.9.x prior to 1.9.10, update to version 1.9.10 or later.