CVE-2015-5143

Published: Jul 14, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

Affected (57)

Products: Djangoproject: Django · Debian: Debian Linux · Oracle: Solaris · +1 more

Show all products

Djangoproject: Django · Debian: Debian Linux · Oracle: Solaris · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

Configuration A

50 vulnerable

Vulnerable Software	Affected Versions
Djangoproject Django	Version 1.4.20
Djangoproject Django	Version 1.5.10
Djangoproject Django	Version 1.5.11
Djangoproject Django	Version 1.5.12
Djangoproject Django	Version 1.5.1
Djangoproject Django	Version 1.5.2
Djangoproject Django	Version 1.5.3
Djangoproject Django	Version 1.5.4
Djangoproject Django	Version 1.5.5
Djangoproject Django	Version 1.5.6
Djangoproject Django	Version 1.5.7
Djangoproject Django	Version 1.5.8
Djangoproject Django	Version 1.5.9
Djangoproject Django	Version 1.5
Djangoproject Django	Version 1.5 alpha
Djangoproject Django	Version 1.5 beta
Djangoproject Django	Version 1.6.10
Djangoproject Django	Version 1.6.1
Djangoproject Django	Version 1.6.2
Djangoproject Django	Version 1.6.3
Djangoproject Django	Version 1.6.4
Djangoproject Django	Version 1.6.5
Djangoproject Django	Version 1.6.6
Djangoproject Django	Version 1.6.7
Djangoproject Django	Version 1.6.8
Djangoproject Django	Version 1.6.9
Djangoproject Django	Version 1.6
Djangoproject Django	Version 1.6 beta1
Djangoproject Django	Version 1.6 beta2
Djangoproject Django	Version 1.6 beta3
Djangoproject Django	Version 1.6 beta4
Djangoproject Django	Version 1.7.1
Djangoproject Django	Version 1.7.2
Djangoproject Django	Version 1.7.3
Djangoproject Django	Version 1.7.4
Djangoproject Django	Version 1.7.5
Djangoproject Django	Version 1.7.6
Djangoproject Django	Version 1.7.7
Djangoproject Django	Version 1.7.8
Djangoproject Django	Version 1.7.9
Djangoproject Django	Version 1.7 beta1
Djangoproject Django	Version 1.7 beta2
Djangoproject Django	Version 1.7 beta3
Djangoproject Django	Version 1.7 beta4
Djangoproject Django	Version 1.7 rc1
Djangoproject Django	Version 1.7 rc2
Djangoproject Django	Version 1.7 rc3
Djangoproject Django	Version 1.8.0
Djangoproject Django	Version 1.8.1
Djangoproject Django	Version 1.8.2