Lucene search
MitreCVELIST:CVE-2024-39329HistoryJul 10, 2024 - 12:00 a.m.
CVE-2024-39329
2024-07-1000:00:00
mitre
www.cve.org
7
django
user enumeration
timing attack
EPSS
0
Percentile
15.8%
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password.
Related
vulnrichment
vulnrichment
CVE-2024-39329
2024-07-10 00:00:00
veracode
veracode
Timing Attack
2024-07-11 04:47:34
wolfi
wolfi
CVE-2024-39329 vulnerabilities
2024-09-20 21:14:10
github
github
Django vulnerable to user enumeration attack
2024-07-10 06:33:52
redhatcve
redhatcve
CVE-2024-39329
2024-07-18 06:34:24
cve
cve
CVE-2024-39329
2024-07-10 05:15:12
debiancve
debiancve
CVE-2024-39329
2024-07-10 05:15:12
osv
osv
CVE-2024-39329
2024-07-10 05:15:12
PYSEC-2024-57
2024-07-10 05:15:00
Django vulnerable to user enumeration attack
2024-07-10 06:33:52
nvd
nvd
CVE-2024-39329
2024-07-10 05:15:12
ubuntucve
ubuntucve
CVE-2024-39329
2024-07-09 00:00:00
freebsd
freebsd
Django -- multiple vulnerabilities
2024-07-01 00:00:00
nessus
nessus
Fedora 39 : python-django4.2 (2024-a7eef0ca7b)
2024-07-25 00:00:00
Fedora 40 : python-django4.2 (2024-d05d37ead7)
2024-07-25 00:00:00
Fedora 39 : python-django (2024-82547e3e16)
2024-07-25 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6888-1)
2024-07-10 00:00:00
Ubuntu: Security Advisory (USN-6888-2)
2024-07-12 00:00:00
Django 4.x < 4.2.14, 5.x < 5.0.7 Multiple Vulnerabilities - Windows
2024-07-12 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2024-07-09 00:00:00
Django vulnerabilities
2024-07-11 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: python-django-4.2.14-2.fc40
2024-07-19 01:46:40
[SECURITY] Fedora 39 Update: python-django4.2-4.2.14-1.fc39
2024-07-19 02:22:03
[SECURITY] Fedora 39 Update: python-django-4.2.14-2.fc39
2024-07-19 02:22:02
ibm
ibm
redhat
redhat