Information Disclosure

channels is vulnerable to information disclosure. The legacy channels.http.AsgiHandler class used for handling HTTP type requests in an ASGI environment incorrectly separates request scopes which would result in a crash and responses could be sent to the wrong client, resulting in disclosure of...

DEBIAN-CVE-2020-35681

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channe...