Lucene search

K
cvelistMitreCVELIST:CVE-2024-22513
HistoryMar 16, 2024 - 12:00 a.m.

CVE-2024-22513

2024-03-1600:00:00
mitre
www.cve.org
1
cve-2024-22513
djangorestframework-simplejwt
information disclosure
user validation checks

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%