Поиск уязвимостей
Количество 6
Количество 6
CVE-2014-0482
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
CVE-2014-0482
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
CVE-2014-0482
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
CVE-2014-0482
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django ...
GHSA-625g-gx8c-xcmg
Django Middleware Enables Session Hijacking
ALT-PU-2014-3205
ALT-PU-2014-3205: package `python-module-django` update to version 1.6.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-0482 The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header. | CVSS2: 6 | 2% Низкий | около 12 лет назад |
 | CVE-2014-0482 The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header. | CVSS2: 5.8 | 2% Низкий | около 12 лет назад |
 | CVE-2014-0482 The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header. | CVSS2: 6 | 2% Низкий | около 12 лет назад |
| CVE-2014-0482 The contrib.auth.middleware.RemoteUserMiddleware middleware in Django ... | CVSS2: 6 | 2% Низкий | около 12 лет назад |
| GHSA-625g-gx8c-xcmg Django Middleware Enables Session Hijacking | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2014-3205 ALT-PU-2014-3205: package `python-module-django` update to version 1.6.6-alt1 | CVSS2: 6 | около 12 лет назад |
Уязвимостей на страницу