NetSight
IP …
high7.8

CVE-2015-5143

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of serv…

Impact

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

Affected products

VendorProductAffected versions
DjangoprojectDjango
Versions 1.4.20, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4
DebianDebian Linux
Versions 7.0, 8.0
OracleSolaris
Version 11.3
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10

Weakness classification

CWE-399

References