CyberRota
← Ana sayfaya dön

CVE-2026-6907

MEDIUM · CVSS 4.3 EPSS %0.03

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-05T16:16:18.227 · Çekilme zamanı: 2026-06-04T12:00:45.253018+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-6907
Severity
MEDIUM
CVSS
4.3
EPSS
%0.03

Orijinal NVD Açıklaması

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. `django.middleware.cache.UpdateCacheMiddleware` erroneously caches requests where the `Vary` header contained an asterisk (`'*'`). This can lead to private data being stored and served. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Ahmad Sadeddin for reporting this issue.