CVE-2016-7401

HIGH · CVSS 7.5 EPSS 5.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-10-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-7401

Severity

HIGH

CVSS

7.5

EPSS

5.70%

Original NVD Description

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.