Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-4136
5.8
MEDIUMCVSS v2
Published
October 19, 2011
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.<= 1.2.6, = 1.2.5, = 0.95, = 1.0, = 1.3, = 1.1.2, = 1.0.1, = 1.1, = 1.2.1, = 1.0.2, = 0.95.1, = 1.2.3, = 1.1.0, = 1.2.4, = 1.2, = 1.1.3, = 0.91, = 1.2.2, = 0.96, < 1.2.7, >= 1.3, < 1.3.1NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.<= 1.2.6, = 1.2.5, = 0.95, = 1.0, = 1.3, = 1.1.2, = 1.0.1, = 1.1, = 1.2.1, = 1.0.2, = 0.95.1, = 1.2.3, = 1.1.0, = 1.2.4, = 1.2, = 1.1.3, = 0.91, = 1.2.2, = 0.96, < 1.2.7, >= 1.3, < 1.3.1NVD