diff --git a/advisories/github-reviewed/2022/05/GHSA-x38m-486c-2wr9/GHSA-x38m-486c-2wr9.json b/advisories/github-reviewed/2022/05/GHSA-x38m-486c-2wr9/GHSA-x38m-486c-2wr9.json index 108ae0b4777..793901e79d9 100644 --- a/advisories/github-reviewed/2022/05/GHSA-x38m-486c-2wr9/GHSA-x38m-486c-2wr9.json +++ b/advisories/github-reviewed/2022/05/GHSA-x38m-486c-2wr9/GHSA-x38m-486c-2wr9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-x38m-486c-2wr9", - "modified": "2024-05-08T17:33:38Z", + "modified": "2024-09-18T19:59:52Z", "published": "2022-05-17T03:16:12Z", "aliases": [ "CVE-2015-5964" @@ -9,7 +9,14 @@ "summary": "Denial-of-service possibility in logout() view by filling session store", "details": "The (1) `contrib.sessions.backends.base.SessionBase.flush` and (2) `cache_db.SessionStore.flush` functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U" + } ], "affected": [ { @@ -22,7 +29,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.7.0" + "introduced": "1.7" }, { "fixed": "1.7.10" @@ -41,7 +48,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.4.0" + "introduced": "1.4" }, { "fixed": "1.4.22" @@ -72,6 +79,18 @@ "type": "PACKAGE", "url": "https://github.com/django/django" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-23.yaml" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20150906124157/http://www.securityfocus.com/bid/76440" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20150923161048/http://www.securitytracker.com/id/1033318" + }, { "type": "WEB", "url": "https://web.archive.org/web/20200228051814/http://www.securityfocus.com/bid/76440"