{"action":"Upgrade django to 1.4.14 or later.","affected":[{"fixed":"1.4.14","introduced":"0"},{"fixed":"1.5.9","introduced":"1.5"},{"fixed":"1.6.6","introduced":"1.6"},{"fixed":"1.7c3","introduced":"1.7a1"}],"component":"django","cve_ids":["CVE-2014-0482"],"ecosystem":"PyPI","epss":0.01961,"exploited":false,"fixed_versions":["1.4.14","1.5.9","1.6.6","1.7c3"],"ghsa_id":"GHSA-625g-gx8c-xcmg","id":"tcs_01M5KF23FFX2DG6239GYK2GY34","modified_at":"2025-02-19T05:40:57.970057Z","published_at":"2022-05-14T02:09:22Z","references":["https://osv.dev/vulnerability/GHSA-625g-gx8c-xcmg","https://nvd.nist.gov/vuln/detail/CVE-2014-0482","https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09","https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c","https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9","https://github.com/django/django/commit/dd68f319b365f6cb38c5a6c106faf4f6142d7d88","https://github.com/django/django","https://github.com/django/django/blob/aa3cb3f37265be37d892e2b391ff023e9caee2a4/docs/releases/1.5.9.txt#L42","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2014-6.yaml","https://www.djangoproject.com/weblog/2014/aug/20/security","http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html","http://www.debian.org/security/2014/dsa-3010"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-625g-gx8c-xcmg","url":"https://osv.dev/vulnerability/GHSA-625g-gx8c-xcmg"}],"summary":"Django Middleware Enables Session Hijacking"}