CVE-2015-5964

The CVE-2015-5964 issue affects Django where the functions contrib.sessions.backends.base.SessionBase.flush and cache_db.SessionStore.flush can create empty sessions in certain circumstances, enabling a remote attacker to exhaust the session store and cause a denial of service. Affected versions ...