CVE-2007-5712

2007-10-3019:46:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2007-5712

django

i18n

denial of service

memory consumption

security vulnerability

nvd

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.11 Low

EPSS

Percentile

95.2%

JSON

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Affected configurations

NVD

Node

django_projectdjangoMatch0.91

django_projectdjangoMatch0.95

django_projectdjangoMatch0.95.1

django_projectdjangoMatch0.96

CPENameOperatorVersion
django_project:djangodjango project djangoeq0.91
django_project:djangodjango project djangoeq0.95
django_project:djangodjango project djangoeq0.95.1
django_project:djangodjango project djangoeq0.96

CPE	Name	Operator	Version
django_project:django	django project django	eq	0.91
django_project:django	django project django	eq	0.95
django_project:django	django project django	eq	0.95.1
django_project:django	django project django	eq	0.96