FICHE CVE

CVE-2015-5964

Publiée le 2015-08-24 · Dernière modification le 2026-06-17

The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.

CVSS 2.05.0 MOYENNE

Type de faiblesse

Erreurs de gestion des ressources · CWE-399