2.6
CVSSv2

CVE-2007-5712

Published: 30/10/2007 Updated: 29/07/2017
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P

Vulnerability Summary

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote malicious users to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Vulnerable Product Search on Vulmon Subscribe to Product

django project django 0.91

django project django 0.96

django project django 0.95

django project django 0.95.1

Vendor Advisories

Debian Bug report logs - #448838 CVE-2007-5712 remote denial of service Package: python-django; Maintainer for python-django is Debian Python Modules Team <python-modules-team@listsaliothdebianorg>; Source for python-django is src:python-django (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: ...
Simon Willison discovered that in Django, a Python web framework, the feature to retain HTTP POST data during user reauthentication allowed a remote attacker to perform unauthorized modification of data through cross site request forgery This is possible regardless of the Django plugin to prevent cross site request forgery being enabled The Commo ...