p PatchFirst

CVE-2007-5712

CVE-2007-5712

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

CVSS 5.9 · Medium · EPSS 1.8% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • python-django Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.96-1.1

    Update to 0.96-1.1

  • python-django Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.96-1.1

    Update to 0.96-1.1

  • python-django Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.96-1.1

    Update to 0.96-1.1

  • django PyPI

    Versions
    • 0.96.0
    Affected ranges
    • ECOSYSTEM: ≥ 0.96.0, < 0.96.1

    Update to 0.96.1

  • django PyPI

    Affected ranges
    • ECOSYSTEM: ≥ 0.95, < 0.95.2

    Update to 0.95.2

  • django PyPI

    Versions
    • 0.91.0
    Affected ranges
    • ECOSYSTEM: ≥ 0.91.0, < 0.91.1

    Update to 0.91.1

  • django PyPI

    Versions
    • 1.0.1
    • 1.0.2
    • 1.0.3
    • 1.0.4
    Affected ranges
    • ECOSYSTEM: < 1.1

    Update to 1.1

Original sources

Check your server →