CVE-2015-5143 PUBLISHED

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

EPSS 15.81% · 94.7th percentile

Risk Scores

EPSS Score
15.81%
94.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSpython-django0, 1.5.4-1ubuntu1, 1.6-1

Timeline

References

Open in Interactive Console →