Paul Mcmillan

Um problema existe na função `get signed cookie()` dentro de `django.http.HttpRequest`. A função utiliza uma derivação de salt não injetiva ao concatenar o nome do cookie e o argumento de salt. Isso permite que um invasor remoto utilize um cookie em um contexto diferente daquele em que foi assinado, por meio de pares distintos de `name` e `salt` que produzem a mesma concatenação.

The issue concerns a middleware memcache encryption bypass in the python-keystoneclient. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue concerns a middleware memcache signing bypass in the python-keystoneclient.

The issue concerns the transmission of a cookie in an https session. Specifically, the cookie does not have the secure flag set, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

The issue allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

The caching framework in Django reuses a cached CSRF token for all anonymous users. This allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.

The issue is related to the `verify exists` functionality in the `URLField` implementation, which relies on Python libraries that attempt to access an arbitrary URL with no timeout. This allows remote attackers to cause a denial of service by consuming resources via a URL associated with a slow response, a completed TCP connection with no application data sent, or a large amount of application data.

A directory traversal issue might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.