Django User Sessions
Approved changes feed: RSS · Atom
cpe:2.3:a:django-user-sessions_project:django-user-sessions:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Django User Sessions Project (c1039794-b2e1-598c-9736-878f7fba3b58) |
|---|---|
| Product | Django User Sessions (f7db17bd-25cf-5331-9c28-7711230d9053) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jazzband/django-user-sessions |
purl2cpe | 2026-06-01 10:12:07.882645 |
pkg:pypi/django-user-sessions |
purl2cpe | 2026-06-01 10:12:07.882648 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5224 |
vulnerable | 2026-06-08 05:26:41.537221 |
Session key exposure through session list in Django User Sessions
MEDIUM (6.5)
In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessions. The session key is used to identify sessions, and thus included in the rendered HTML. In itself this is not a problem. However if the website has an XSS vulnerability, the session key could be extracted by the attacker and a session takeover could happen.
Published: 2020-01-24T20:05:15.000Z
Updated: 2024-08-04T08:22:08.941Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.