CVE-2013-1443

Published: Sep 23, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.

Affected (16)

Products: Djangoproject: Django

Djangoproject

1 product

Django

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Djangoproject Django	Version 1.4.1
Djangoproject Django	Version 1.4.2
Djangoproject Django	Version 1.4.4
Djangoproject Django	Version 1.4.5
Djangoproject Django	Version 1.4.6
Djangoproject Django	Version 1.4.7
Djangoproject Django	Version 1.4

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Djangoproject Django	Version 1.6 beta1
Djangoproject Django	Version 1.6 beta2
Djangoproject Django	Version 1.6 beta3

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Djangoproject Django	Version 1.5.1
Djangoproject Django	Version 1.5.2
Djangoproject Django	Version 1.5.3
Djangoproject Django	Version 1.5
Djangoproject Django	Version 1.5 alpha
Djangoproject Django	Version 1.5 beta