tocsin

CVE-2015-5964

2 advisories.

PyPI/django CVE-2015-5964: high 7.5

Denial-of-service possibility in logout() view by filling session store

Action: Upgrade django to 1.4.22 or later.

pip install django==1.7.10
pip install django==1.4.22

Affected

introducedfixedlast affected
1.71.7.10-
1.41.4.22-

Fixed versions

1.7.101.4.22

Sources

CVE-2015-5964 · published · modified · JSON

PyPI/django CVE-2015-5964: unknown

The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sess

Action: Upgrade django to 1.4.22 or later.

pip install django==1.7.10
pip install django==1.4.22

Affected

introducedfixedlast affected
1.41.4.22-
1.71.7.10-

Fixed versions

1.7.101.4.22

Sources

CVE-2015-5964 · published · modified · JSON