CVE-2015-3982

CVE-2015-3982 describes a session hijacking vulnerability in Django 1.8.x before 1.8.2, specifically affecting the cached_db backend. An attacker can exploit a flaw in the session.flush function, which improperly handles an empty string in the session key, to hijack user sessions. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for partial integrity impact with low attack complexity and no authentication required. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.