social-auth-app-django affected by Improper Handling of Case Sensitivity

🗓️ 24 Apr 2024 18:47:21Reported by GitHub Advisory DatabaseType

social-auth-app-django affected by Improper Handling of Case Sensitivity. Impact on third-party authentication user IDs in MySQL or MariaDB databases. Fixed in 5.4.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Denial of service and security restrictions bypass might affect IBM Storage Defender – Resiliency Service	3 Jul 202420:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.5 addresses multiple security vulnerabilities.	3 Feb 202523:04	–	ibm
FreeBSD	py-social-auth-app-django -- Improper Handling of Case Sensitivity	24 Apr 202400:00	–	freebsd
CNNVD	Python Social Auth 安全漏洞	24 Apr 202400:00	–	cnnvd
CVE	CVE-2024-32879	24 Apr 202419:42	–	cve
Cvelist	CVE-2024-32879 social-auth-app-django Improper Handling of Case Sensitivity vulnerability	24 Apr 202419:42	–	cvelist
Debian CVE	CVE-2024-32879	24 Apr 202419:42	–	debiancve
EUVD	EUVD-2024-1061	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : py-social-auth-app-django -- Improper Handling of Case Sensitivity (b3affee8-04d1-11ef-8928-901b0ef714d4)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:3781)	10 Jun 202400:00	–	nessus

Vulners

Node

social-auth-app-djangoRange<5.4.1pip

Source	Link
github	www.github.com/python-social-auth/social-app-django/security/advisories/GHSA-2gr8-3wc7-xhj3
github	www.github.com/python-social-auth/social-app-django/pull/566
github	www.github.com/python-social-auth/social-app-django/commit/31c3e0c7edb187004d8abbde7e9c4f7ef9098138
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-32879
github	www.github.com/advisories/GHSA-2gr8-3wc7-xhj3

28 Aug 2024 20:09Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.9

EPSS0.00581

SSVC