CVE

Id
82421  
CVE No.
CVE-2015-5144  
Status
Candidate  
Description
Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.  
Phase
Assigned (20150629)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
738363 82421 CVE-2015-5144 CONFIRM:https://www.djangoproject.com/weblog/2015/jul/08/security-releases/  View
738364 82421 CVE-2015-5144 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
738365 82421 CVE-2015-5144 DEBIAN:DSA-3305  View
738366 82421 CVE-2015-5144 URL:http://www.debian.org/security/2015/dsa-3305  View
738367 82421 CVE-2015-5144 FEDORA:FEDORA-2015-1dd5bc998f  View
738368 82421 CVE-2015-5144 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html  View
738369 82421 CVE-2015-5144 GENTOO:GLSA-201510-06  View
738370 82421 CVE-2015-5144 URL:https://security.gentoo.org/glsa/201510-06  View
738371 82421 CVE-2015-5144 SUSE:openSUSE-SU-2015:1802  View
738372 82421 CVE-2015-5144 URL:http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html  View
738373 82421 CVE-2015-5144 SUSE:openSUSE-SU-2015:1813  View
738374 82421 CVE-2015-5144 URL:http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html  View
738375 82421 CVE-2015-5144 UBUNTU:USN-2671-1  View
738376 82421 CVE-2015-5144 URL:http://www.ubuntu.com/usn/USN-2671-1  View
738377 82421 CVE-2015-5144 BID:75665  View

Related JVN