tocsin

PyPI/django-user-sessions CVE-2020-5224: unknown, EPSS 0.53%

In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessions. The session key is used to identify sessions, and thus included in the rende

Action: Upgrade django-user-sessions to 1.7.1 or later.

pip install django-user-sessions==1.7.1

Affected

introducedfixedlast affected
01.7.1-

Fixed versions

1.7.1

Sources

CVE-2020-5224 · published · modified · JSON