Vulnetix
Try Vulnetix Request Demo
CVE-2015-3982 PUBLISHED

Reported by mitre · Published June 2, 2015

The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a

Timeline

References

Open in Interactive Console →