{"id":"CVE-2018-16552","aliases":["GHSA-hq4r-47qc-3jhc","PYSEC-2018-65"],"url":"https://o3.security/vulnerability/CVE-2018-16552","summary":"MicroPyramid Django-CRM CSRF","details":"MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.","published":"2018-09-05T22:29:00.600Z","modified":"2026-08-27T08:18:19.561325Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"epss":{"score":0.00638,"percentile":0.47902,"asOf":"2026-08-20"},"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"PyPI","name":"django-crm","fixedVersion":null}],"fix":null,"references":[{"type":"EVIDENCE","url":"https://github.com/MicroPyramid/Django-CRM/issues/68"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-27T08:18:19.561325Z"}}