Lucene search

K
nvd[email protected]NVD:CVE-2024-22513
HistoryMar 16, 2024 - 7:15 a.m.

CVE-2024-22513

2024-03-1607:15:06
web.nvd.nist.gov
4
cve-2024-22513
user validation
web application resources

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%