PT-2015-6780 · Django Software Foundation+1 · Django+1

João Silva + 1 · Published 2015-07-14 · Updated 2026-01-03 · CVE-2015-5145

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Django versions 1.8.0 through 1.8.2

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, via unspecified vectors. This is related to the validators.URLValidator in Django.

Recommendations For Django versions 1.8.0 through 1.8.2, update to version 1.8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the validators.URLValidator function until a patch is available.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-1333

CWE-399

CWE-400

Related Identifiers

ALT-PU-2015-1872

CVE-2015-5145

GHSA-CQF7-FF9H-7967

MGASA-2015-0293

OPENSUSE-SU-2023:0077-1

OPENSUSE-SU-2024:10066-1

OPENSUSE-SU-2024:11205-1

OPENSUSE-SU-2024:13887-1

OPENSUSE-SU-2024:14208-1

OPENSUSE-SU-2026:10005-1

PYSEC-2015-21

Affected Products

Alt Linux

Django

References · 101

• https://osv.dev/vulnerability/openSUSE-SU-2024:14208-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2015-21 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cqf7-ff9h-7967 · Vendor Advisory
• https://djangoproject.com/weblog/2015/jul/08/security-releases · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10066-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201510-06 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10005-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13887-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5145 · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0293 · Vendor Advisory
• https://debian.org/security/2015/dsa-3305 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0077-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11205-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0293.html · Security Note
• https://github.com/django/django · Note