tocsin

CVE-2015-0219

2 advisories.

PyPI/django CVE-2015-0219: medium 5.3

Django WSGI Header Spoofing Vulnerability

Action: Upgrade django to 1.4.18 or later.

pip install django==1.4.18
pip install django==1.6.10
pip install django==1.7.3

Affected

introducedfixedlast affected
01.4.18-
1.61.6.10-
1.71.7.3-

Fixed versions

1.4.181.6.101.7.3

Sources

CVE-2015-0219 · published · modified · JSON

PyPI/django CVE-2015-0219: unknown

Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header,

Action: Upgrade django to 1.4.18 or later.

pip install django==1.4.18
pip install django==1.6.10
pip install django==1.7.3

Affected

introducedfixedlast affected
01.4.18-
1.51.6.10-
1.71.7.3-

Fixed versions

1.4.181.6.101.7.3

Sources

CVE-2015-0219 · published · modified · JSON