CVE-2015-0222

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a…

published January 16, 2015

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02712 · 85.8th percentile
Published
2015-01-16T16:00Z
EPSS history
Timeline
  • 16 JAN 16:00Z
    ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a…
    cvelistv5