Django DEPRECATED: Code Vulnerability - CVE-2015-0222 - Vulnerability Database

Django DEPRECATED: Code Vulnerability - CVE-2015-0222

Medium

Reference: CVE-2015-0222

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-0222

Title: Django DEPRECATED: Code Vulnerability

Overview:

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3 when show_hidden_initial is set to True allows remote attackers to cause a denial of service by submitting duplicate values which triggers a large number of SQL queries.