Lucene search
+L

10 matches found

OSV
OSV
added 2022/05/14 2:09 a.m.24 views

GHSA-625G-GX8C-XCMG Django Middleware Enables Session Hijacking

The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors...

6.5CVSS5.7AI score0.01961EPSS
SaveExploits0References11
Rows per page
Query Builder