Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Django Improper Input Validation Vulnerability - CVE-2015-5144 - Vulnerability Database
Django

Django Improper Input Validation Vulnerability - CVE-2015-5144

Medium
Reference: CVE-2015-5144
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-5144
Title: Django Improper Input Validation Vulnerability
Overview:

Django before 1.4.21 1.5.x through 1.6.x 1.7.x before 1.7.9 and 1.8.x before 1.8.3 uses an incorrect regular expression which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator a (2) URL to the URLValidator or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.