-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the filename conflict resolution algorithm in get_available_name(). The commit diff shows replacement of itertools.count() with get_random_string(), explicitly addressing the O(n) algorithm. Documentation changes and CVE description confirm this was the attack vector. No other functions show direct involvement in the vulnerable pattern.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| django | pip | < 1.4.14 | 1.4.14 |
| django | pip | >= 1.6, < 1.6.6 | 1.6.6 |
| Django | pip | >= 1.5, < 1.5.9 | 1.5.9 |