tocsin

CVE-2015-0222

2 advisories.

PyPI/django CVE-2015-0222: high 7.5

Django database denial-of-service with ModelMultipleChoiceField

Action: Upgrade django to 1.6.10 or later.

pip install django==1.6.10
pip install django==1.7.3

Affected

introducedfixedlast affected
1.61.6.10-
1.71.7.3-

Fixed versions

1.6.101.7.3

Sources

CVE-2015-0222 · published · modified · JSON

PyPI/django CVE-2015-0222: unknown

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate val

Action: Upgrade django to 1.4.18 or later.

pip install django==1.4.18
pip install django==1.6.10
pip install django==1.7.3

Affected

introducedfixedlast affected
01.4.18-
1.51.6.10-
1.71.7.3-

Fixed versions

1.4.181.6.101.7.3

Sources

CVE-2015-0222 · published · modified · JSON