Skip to content
OpenAdvisories
High DSA-2758-1 1 CVE

python-django - denial of service

Published Sep 17, 2013 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 python-django 1.2.3-3+squeeze8
Debian · 7 python-django 1.4.5-1+deb7u4

Vulnerabilities 1

  • High 7.5

    Django Denial of Service Vulnerability in the authentication framework

    The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.