Django@0.95 Security Vulnerabilities and Issues — Django@0.95 CVE List

Lucene search

Django ProjectDjango0.95

3 matches found

CVE•added 2007/10/30 7:46 p.m.•63 views

CVE-2007-5712

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large A...

2.6CVSS6.2AI score0.01594EPSS

CVE•added 2007/01/23 12:28 a.m.•55 views

CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.

6.5CVSS6.4AI score0.00602EPSS

CVE•added 2007/01/23 12:28 a.m.•49 views

CVE-2007-0404

bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.

7.5CVSS7.3AI score0.0055EPSS