Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8b12-22bg-jkch
Vulnerability ID VCID-8b12-22bg-jkch
Aliases CVE-2007-5712
GHSA-9v8h-57gv-qch6
PYSEC-2007-1
Summary The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-400 Uncontrolled Resource Consumption
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
epss 0.01815 https://api.first.org/data/v1/epss?cve=CVE-2007-5712
cvssv3.1 5.9 https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
cvssv4 8.2 https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
generic_textual HIGH https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-9v8h-57gv-qch6
cvssv3.1 5.9 https://github.com/django/django
cvssv4 8.2 https://github.com/django/django
generic_textual HIGH https://github.com/django/django
cvssv3.1 5.9 https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234
cvssv4 8.2 https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234
generic_textual HIGH https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234
cvssv3.1 5.9 https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f
cvssv4 8.2 https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f
generic_textual HIGH https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f
cvssv3.1 5.9 https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81
cvssv4 8.2 https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81
generic_textual HIGH https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81
cvssv3.1 5.9 https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml
cvssv4 8.2 https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml
generic_textual HIGH https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml
cvssv3.1 5.9 https://nvd.nist.gov/vuln/detail/CVE-2007-5712
cvssv4 8.2 https://nvd.nist.gov/vuln/detail/CVE-2007-5712
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2007-5712
cvssv3.1 5.9 http://sourceforge.net/forum/forum.php?forum_id=749199
cvssv4 8.2 http://sourceforge.net/forum/forum.php?forum_id=749199
generic_textual HIGH http://sourceforge.net/forum/forum.php?forum_id=749199
cvssv3.1 5.9 https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435
cvssv4 8.2 https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435
generic_textual HIGH https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435
cvssv3.1 5.9 https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597
cvssv4 8.2 https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597
generic_textual HIGH https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597
cvssv3.1 5.9 https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961
cvssv4 8.2 https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961
generic_textual HIGH https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961
cvssv3.1 5.9 https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227
cvssv4 8.2 https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227
generic_textual HIGH https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227
cvssv3.1 5.9 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
cvssv4 8.2 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
generic_textual HIGH https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
cvssv3.1 5.9 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
cvssv4 8.2 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
generic_textual HIGH https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
cvssv3.1 5.9 http://www.debian.org/security/2008/dsa-1640
cvssv4 8.2 http://www.debian.org/security/2008/dsa-1640
generic_textual HIGH http://www.debian.org/security/2008/dsa-1640
cvssv3.1 5.9 http://www.djangoproject.com/weblog/2007/oct/26/security-fix
cvssv4 8.2 http://www.djangoproject.com/weblog/2007/oct/26/security-fix
generic_textual HIGH http://www.djangoproject.com/weblog/2007/oct/26/security-fix
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5712.json
https://api.first.org/data/v1/epss?cve=CVE-2007-5712
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5712
http://secunia.com/advisories/27435
http://secunia.com/advisories/27597
http://secunia.com/advisories/31961
https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
https://github.com/django/django
https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234
https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f
https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81
https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml
http://sourceforge.net/forum/forum.php?forum_id=749199
https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435
https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597
https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961
https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
http://www.debian.org/security/2008/dsa-1640
http://www.djangoproject.com/weblog/2007/oct/26/security-fix
http://www.securityfocus.com/bid/26227
http://www.vupen.com/english/advisories/2007/3660
http://www.vupen.com/english/advisories/2007/3661
357051 https://bugzilla.redhat.com/show_bug.cgi?id=357051
448838 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448838
CVE-2007-5712 https://nvd.nist.gov/vuln/detail/CVE-2007-5712
GHSA-9v8h-57gv-qch6 https://github.com/advisories/GHSA-9v8h-57gv-qch6
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://exchange.xforce.ibmcloud.com/vulnerabilities/38143
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/django/django
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/django/django
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/django/django/commit/412ed22502e11c50dbfee854627594f0e7e2c234
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/django/django/commit/7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/django/django/commit/8bc36e726c9e8c75c681d3ad232df8e882aaac81
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2007-1.yaml
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2007-5712
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://nvd.nist.gov/vuln/detail/CVE-2007-5712
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at http://sourceforge.net/forum/forum.php?forum_id=749199
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at http://sourceforge.net/forum/forum.php?forum_id=749199
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://web.archive.org/web/20091201070224/http://secunia.com/advisories/27435
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://web.archive.org/web/20111224195100/http://secunia.com/advisories/27597
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://web.archive.org/web/20111229085535/http://secunia.com/advisories/31961
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://web.archive.org/web/20200228183657/http://www.securityfocus.com/bid/26227
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at http://www.debian.org/security/2008/dsa-1640
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at http://www.debian.org/security/2008/dsa-1640
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at http://www.djangoproject.com/weblog/2007/oct/26/security-fix
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at http://www.djangoproject.com/weblog/2007/oct/26/security-fix
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.82782
EPSS Score 0.01815
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:40:47.751262+00:00 Pypa Importer Import https://github.com/pypa/advisory-database/blob/main/vulns/django/PYSEC-2007-1.yaml 38.0.0