CVE-2014-1418 Medium Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

CVE-2014-1418 - Medium Severity Vulnerability

Vulnerable Library - Django-1.7.1-py2.py3-none-any.whl

A high-level Python Web framework that encourages rapid development and clean, pragmatic design.

path: /example-python/requirements.txt

Library home page: https://pypi.python.org/packages/d2/29/1935a5825b8820d1e398ab83f0730d483ec731fae34745ddac8318cf6ac8/Django-1.7.1-py2.py3-none-any.whl

Dependency Hierarchy:

• ❌ Django-1.7.1-py2.py3-none-any.whl (Vulnerable Library)

Vulnerability Details

Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers.

Publish Date: 2014-05-16

URL: CVE-2014-1418

CVSS 2 Score Details (6.4)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2014-1418

Release Date: 2014-05-16

Fix Resolution: 1.4.13,1.5.8,1.6.5,1.7b4

---

Step up your Open Source Security Game with WhiteSource here