10 matches found
GHSA-625G-GX8C-XCMG Django Middleware Enables Session Hijacking
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors...
6.5CVSS5.7AI score0.01961EPSS
SaveExploits0References11
20