CVE-2007-5712: Medium severity Django Project Django vulnerability
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5712?
CVE-2007-5712 is rated as a high vulnerability due to its ability to facilitate denial of service attacks through memory consumption.
How do I fix CVE-2007-5712?
To mitigate CVE-2007-5712, upgrade to Django version 0.91.1, 0.95.2, or 0.96.1.
What versions of Django are affected by CVE-2007-5712?
CVE-2007-5712 affects Django versions 0.91, 0.95, 0.95.1, and 0.96.
Can CVE-2007-5712 be exploited without authenticated access?
Yes, CVE-2007-5712 can be exploited remotely without the need for authentication by sending multiple large HTTP requests.
What are the symptoms of an attack using CVE-2007-5712?
Symptoms of an attack exploiting CVE-2007-5712 may include significant slowdowns or unresponsiveness of the affected Django application due to memory exhaustion.