CVE-2014-1418

Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers.

• djangoproject django 1.7 • djangoproject django 1.4 • djangoproject django 1.4.1 • djangoproject django 1.4.2 • djangoproject django 1.4.4 • djangoproject django 1.4.5 • djangoproject django 1.4.6 • djangoproject django 1.4.7 • djangoproject django 1.4.8 • djangoproject django 1.4.9 • djangoproject django 1.4.10 • djangoproject django 1.4.11 • djangoproject django 1.4.12 • djangoproject django 1.5 • djangoproject django 1.5.1 • djangoproject django 1.5.2 • djangoproject django 1.5.3 • djangoproject django 1.5.4 • djangoproject django 1.5.5 • djangoproject django 1.5.6 • djangoproject django 1.5.7 • canonical ubuntu linux 10.04 • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.10 • canonical ubuntu linux 14.04 • djangoproject django 1.6 • djangoproject django 1.6.1 • djangoproject django 1.6.2 • djangoproject django 1.6.3 • djangoproject django 1.6.4