-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from Django's handling of 'Vary' and 'Cache-Control' headers for Internet Explorer. The commit diffs explicitly remove these two functions from the response processing chain (response_fixes in django/core/handlers/base.py) and delete their implementations in django/http/utils.py. The security advisory confirms these functions caused improper header handling, allowing cache poisoning. Their removal in patched versions directly addresses the vulnerability.
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Django | pip | >= 1.4, < 1.4.13 | 1.4.13 |
| Django | pip | >= 1.5, < 1.5.8 | 1.5.8 |
| Django | pip | >= 1.6, < 1.6.5 | 1.6.5 |
| Django | pip | >= 1.7a1, < 1.7b4 | 1.7b4 |
Ongoing coverage of React2Shell