ID CVE-2015-5145
Summary validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:djangoproject:django:1.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:djangoproject:django:1.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:djangoproject:django:1.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:djangoproject:django:1.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:djangoproject:django:1.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:djangoproject:django:1.8.2:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 22-09-2017 - 01:29)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 75691
confirm https://www.djangoproject.com/weblog/2015/jul/08/security-releases/
gentoo GLSA-201510-06
sectrack 1032820
Last major update 22-09-2017 - 01:29
Published 14-07-2015 - 17:59
Last modified 22-09-2017 - 01:29
Back to Top