2 matches found
The vulnerability of the Django web application framework, which allows a hacker to trigger a denial-of-service attack
The vulnerability of the contrib.sessions.backends.base.SessionBase.flush and cachedb.SessionStore.flush functions in the Django web framework is related to resource management errors. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service interruptions...
CVE-2015-5964
The CVE-2015-5964 issue affects Django where the functions contrib.sessions.backends.base.SessionBase.flush and cache_db.SessionStore.flush can create empty sessions in certain circumstances, enabling a remote attacker to exhaust the session store and cause a denial of service. Affected versions ...