Description
The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.
Remediation
References
Related Vulnerabilities
osTicket Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-30082)
MediaWiki Incorrect Authorization Vulnerability (CVE-2021-36132)
WordPress Plugin eventON Multiple Cross-Site Scripting Vulnerabilities (2.6.11)
phpBB Improper Initialization Vulnerability (CVE-2001-1471)
WordPress Plugin Slider Revolution Responsive Local File Inclusion (4.1.4)