CVE-2015-5145: djangoproject django Resource Management Errors
Vulnerability summary
CVE-2015-5145 is a high (CVSS 7.8) Resource Management Errors vulnerability in djangoproject django. EPSS estimates a 2.98% chance of exploitation in the next 30 days, higher than 87.3% of scored vulnerabilities.
Severe, CVSS 8.7 (OSV · Pypi); no exploitation reported by the 5 checked sources; EPSS 3% (FIRST, 04-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 10 · Related 9Timeline
- 14-07-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVSS metrics
3 scores · 2 sources · 3 versionsEPSS trend
Probability
2.98%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
Decrease -0.02 pp
From 3.00% on 05-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Djangoproject1 product
- djangoEOL1.8.0 | 1.8.1 | 1.8.2
PyPI1 product
- django≥ 1.8a1, < 1.8.3 | ≥ 1.8, < 1.8.3
2 vendors · 2 products
References
13 links- www.djangoproject.com/weblog/2015/jul/08/security-releases/X Refsource CONFIRMVendor AdvisoryARTICLE
- github.com/django/djangoPACKAGE