https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:49:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-97032 EUVD-2026-97032 https://cve.radiocsirt.org/vuln/euvd-2026-97032 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0482 <p>The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.</p> <p>The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0482 https://cve.radiocsirt.org/vuln/ghsa-625g-gx8c-xcmg <p><strong>Affected:</strong> PyPI: Django</p> <p>The `contrib.auth.middleware.RemoteUserMiddleware` middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the `contrib.auth.backends.RemoteUserBackend` backend, allows remote authenticated users to hijack web sessions via vectors related to the `REMOTE_USER` header.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>The `contrib.auth.middleware.RemoteUserMiddleware` middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the `contrib.auth.backends.RemoteUserBackend` backend, allows remote authenticated users to hijack web sessions via vectors related to the `REMOTE_USER` header.</p> https://cve.radiocsirt.org/vuln/ghsa-625g-gx8c-xcmg https://cve.radiocsirt.org/vuln/gsd-2014-0482 gsd-2014-0482 https://cve.radiocsirt.org/vuln/gsd-2014-0482 https://cve.radiocsirt.org/vuln/pysec-2014-6 <p><strong>Affected:</strong> PyPI: django</p> <p>The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.</p> https://cve.radiocsirt.org/vuln/pysec-2014-6 https://cve.radiocsirt.org/vuln/suse-su-2015:0563-1 <p>Security update for python-django</p> <p>Security update for python-django</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0563-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0482 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django</p> <p>The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-django</p> <p>The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0482