Lucene search

K
redhatcveRedhat.comRH:CVE-2024-22513
HistoryMar 16, 2024 - 6:23 p.m.

CVE-2024-22513

2024-03-1618:23:29
redhat.com
access.redhat.com
9
cve-2024-22513
djangorestframework-simplejwt
information disclosure
user validation checks

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%

A flaw was found in djangorestframework-simplejwt. Affected versions of this package are vulnerable to information disclosure. This flaw allows a user to access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.8%