Lucene search

K
osvGoogleOSV:GHSA-H582-2PCH-3XV3
HistoryJul 05, 2019 - 9:10 p.m.

Django Denial-of-service by filling session store

2019-07-0521:10:39
Google
osv.dev
9

0.135 Low

EPSS

Percentile

95.7%

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

Rows per page:
1-10 of 831