CVE-2014-1418

2 advisories.

PyPI/django CVE-2014-1418: high 7.4

Django Vulnerable to Cache Poisoning

Action: Upgrade django to 1.4.13 or later.

pip install django==1.4.13

pip install django==1.5.8

pip install django==1.6.5

pip install django==1.7b4

Affected

introduced	fixed	last affected
1.4	1.4.13	-
1.5	1.5.8	-
1.6	1.6.5	-
1.7a1	1.7b4	-

Fixed versions

1.4.13

1.5.8

1.6.5

1.7b4

Sources

CVE-2014-1418 · published 2022-05-17T03:07:00Z · modified 2024-11-28T05:41:16.988361Z · JSON

PyPI/django CVE-2014-1418: unknown

Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attacker