PT-2007-1876

Name of the Vulnerable Software and Affected Versions Django version 0.95 Description The issue is related to the LazyUser class in the AuthenticationMiddleware, which does not properly cache the user name across requests. This allows remote authenticated users to gain the privileges of a differe...