PT-2015-6780 · Django Software Foundation+1 · Django+1

João Silva + 1 · Publicado 2015-07-14 · Atualizado 2026-01-03 · CVE-2015-5145

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Django versions 1.8.0 through 1.8.2

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, via unspecified vectors. This is related to the validators.URLValidator in Django.

Recommendations For Django versions 1.8.0 through 1.8.2, update to version 1.8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the validators.URLValidator function until a patch is available.

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-1333

CWE-399

CWE-400

Identificadores relacionados

ALT-PU-2015-1872

CVE-2015-5145

GHSA-CQF7-FF9H-7967

MGASA-2015-0293

OPENSUSE-SU-2023:0077-1

OPENSUSE-SU-2024:10066-1

OPENSUSE-SU-2024:11205-1

OPENSUSE-SU-2024:13887-1

OPENSUSE-SU-2024:14208-1

OPENSUSE-SU-2026:10005-1

PYSEC-2015-21

Produtos afetados

Alt Linux

Django

Referências · 101

• https://github.com/django/django · Nota
• https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.8.3.txt#L63-L68 · Nota
• https://github.com/django/django/commit/8f9a4d3a2bc42f14bb437defd30c7315adbff22c · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-21.yaml · Nota
• https://suse.com/security/cve/CVE-2018-14574 · Nota
• https://bugzilla.suse.com/1077714 · Nota
• https://suse.com/security/cve/CVE-2024-41989 · Nota
• https://suse.com/security/cve/CVE-2025-59681 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:14208-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-56374 · Nota
• https://suse.com/security/cve/CVE-2022-22818 · Nota
• https://suse.com/security/cve/CVE-2024-45230 · Nota
• https://suse.com/security/cve/CVE-2021-45115 · Nota
• https://suse.com/security/cve/CVE-2025-64459 · Nota
• https://osv.dev/vulnerability/PYSEC-2015-21 · Aviso do Fabricante