Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2015-5144
HistoryJul 14, 2015 - 5:00 p.m.

CVE-2015-5144

2015-07-1417:00:00
mitre
www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%

JSON

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.

Related

cve 1
nvd 1
ubuntucve 1
prion 1
gitlab 1
osv 4
github 1
debiancve 1
nessus 10
openvas 7
debian 2
ubuntu 1
securityvulns 2
mageia 1
freebsd 1
gentoo 1
fedora 2
altlinux 2
cve
cve
CVE-2015-5144
2015-07-14 17:59:07
nvd
nvd
CVE-2015-5144
2015-07-14 17:59:07
ubuntucve
ubuntucve
CVE-2015-5144
2015-07-08 00:00:00
prion
prion
Code injection
2015-07-14 17:59:00
gitlab
gitlab
Header injection via multi-lines input
2015-07-14 00:00:00
osv
osv
Django Vulnerable to HTTP Response Splitting Attack
2022-05-17 00:48:30
PYSEC-2015-10
2015-07-14 17:59:00
python-django - security update
2015-07-08 00:00:00
github
github
Django Vulnerable to HTTP Response Splitting Attack
2022-05-17 00:48:30
debiancve
debiancve
CVE-2015-5144
2015-07-14 17:59:07
nessus
nessus
openSUSE Security Update : python-Django (openSUSE-2015-677)
2015-10-26 00:00:00
Debian DSA-3305-1 : python-django - security update
2015-07-09 00:00:00
openSUSE Security Update : python-django (openSUSE-2015-674)
2015-10-23 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2671-1)
2015-07-10 00:00:00
Debian: Security Advisory (DSA-3305-1)
2015-07-07 00:00:00
Debian Security Advisory DSA 3305-1 (python-django - security update)
2015-07-08 00:00:00
debian
debian
[SECURITY] [DSA 3305-1] python-django security update
2015-07-08 22:14:25
[SECURITY] [DLA 272-1] python-django security update
2015-07-16 13:47:04
ubuntu
ubuntu
Django vulnerabilities
2015-07-09 00:00:00
securityvulns
securityvulns
[USN-2671-1] Django vulnerabilities
2015-07-14 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2015-07-14 00:00:00
mageia
mageia
Updated python-django and python-django14 packages fix security vulnerabilities
2015-07-29 00:01:59
freebsd
freebsd
django -- multiple vulnerabilities
2015-06-10 00:00:00
gentoo
gentoo
Django: Multiple vulnerabilities
2015-10-31 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: python-django-1.8.3-1.fc22
2015-07-23 08:54:39
[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23
2015-11-19 10:11:46
altlinux
altlinux
Security fix for the ALT Linux 9 package python3-module-django version 1.8.5-alt1
2015-10-13 00:00:00
Security fix for the ALT Linux 10 package python3-module-django version 1.8.5-alt1
2015-10-13 00:00:00

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%

JSON
Related for CVELIST:CVE-2015-5144
cve1nvd1ubuntucve1prion1gitlab1osv4github1debiancve1nessus10openvas7debian2ubuntu1securityvulns2mageia1freebsd1gentoo1fedora2altlinux2