CVE-2015-0221

CVE-2015-0221 describes a denial-of-service vulnerability in Django's static file serving mechanism (django.views.static.serve). Specifically, Django versions before 1.4.18, 1.6.10, and 1.7.3 are affected, including canonical and djangoproject distributions. The vulnerability allows remote attackers to consume excessive memory by providing a file containing a very long line, leading to a denial of service. The vulnerability has a CVSS score of 5.0 (medium severity) with an attack vector of network, low attack complexity, no authentication required, and a partial impact on availability. There is no impact on confidentiality or integrity. The EPSS score is low, indicating a low probability of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention or exploitation.