Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.

  • Published: Jan 23, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-0405
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
django_project / django 0.95 0.95.x