Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2007-0405
6.5
MEDIUMCVSS v2
Published
January 23, 2007
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.
GitHub
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 0.95, >= 0.95, < 1.0OSV