3 matches found
CVE-2026-8404
An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control response directives case-insensitively, which allows remote attackers to read responses that were incorrectly cached because their...
CVE-2026-8404
Summary: Django 5.2 (before 5.2.15) and Django 6.0 (before 6.0.6) contain a vulnerability in the UpdateCacheMiddleware where the middleware does not case-insensitively match Cache-Control directives. This can allow remote attackers to read responses that were cached with uppercase or mixed-case d...
PT-2026-45949
An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control response directives case-insensitively, which allows remote attackers to read responses that were incorrectly cached because their...