CVE-2015-5143

2 advisories.

PyPI/django CVE-2015-5143: high 7.5, EPSS 7.27%

Django Denial-of-service by filling session store

Action: Upgrade django to 1.4.21 or later.

pip install django==1.4.21

pip install django==1.7.9

pip install django==1.8.3

Affected

introduced	fixed	last affected
0	1.4.21	-
1.5	1.7.9	-
1.8	1.8.3	-

Fixed versions

1.4.21

1.7.9

1.8.3

Sources

CVE-2015-5143 · published 2019-07-05T21:10:39Z · modified 2024-09-18T15:29:58.218788Z · JSON

PyPI/django CVE-2015-5143: unknown, EPSS 7.27%

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multi