Lucene search
+L

8170 matches found

Veracode
Veracode
•added 2024/04/25 7:36 a.m.•37 views

Improper Handling Of Case Sensitivity

social-auth-app-django is vulnerable to Improper Handling Of Case Sensitivity. The vulnerability is due to default case-insensitive collation in MySQL or MariaDB databases. This vulnerability could cause different IDs to match, resulting in Business Logic Flaws...

4.9CVSS6.6AI score0.00581EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/04/24 8:15 p.m.•27 views

CVE-2024-32879

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS5.1AI score0.00581EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/04/24 8:15 p.m.•33 views

CVE-2024-32879

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS6.6AI score0.00581EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/04/24 7:42 p.m.•30 views

CVE-2024-32879 social-auth-app-django Improper Handling of Case Sensitivity vulnerability

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2024/04/24 7:42 p.m.•43 views

CVE-2024-32879 social-auth-app-django Improper Handling of Case Sensitivity vulnerability

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS5.4AI score0.00581EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/04/24 7:42 p.m.•29 views

CVE-2024-32879 social-auth-app-django Improper Handling of Case Sensitivity vulnerability

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS5.1AI score0.00581EPSS
SaveExploits0References3
Mend
Mend
•added 2024/04/24 7:42 p.m.•5 views

CVE-2024-32879

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS0.00581EPSS
SaveExploits0References9
CVE
CVE
•added 2024/04/24 7:42 p.m.•207 views

CVE-2024-32879

Python Social Auth Django contains a vulnerability (CVE-2024-32879) where third-party authentication user IDs are not case-sensitive due to the database collation before version 5.4.1, allowing mismatched IDs to be treated as equal. The issue is mitigated by upgrading to 5.4.1, which fixes the im...

4.9CVSS6.5AI score0.00581EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/04/24 7:42 p.m.•70 views

CVE-2024-32879

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS5.9AI score0.00581EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/04/24 6:47 p.m.•45 views

social-auth-app-django affected by Improper Handling of Case Sensitivity

Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix...

4.9CVSS5.3AI score0.00581EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2024/04/24 6:47 p.m.•16 views

GHSA-2GR8-3WC7-XHJ3 social-auth-app-django affected by Improper Handling of Case Sensitivity

Impact Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. Patches This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix...

4.9CVSS6.5AI score0.00581EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/24 12:00 a.m.•13 views

PT-2024-24934

Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.4.1 Description The issue arises due to default case-insensitive collation in MySQL or MariaDB databases, causing third-party authentication user IDs to not be case-sensitive. This could lead to different...

4.9CVSS5.9AI score0.00581EPSS
SaveExploits0References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/24 12:00 a.m.•2 views

CVE-2024-32879: Improper Handling of Case Sensitivity

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed b...

4.9CVSS6.3AI score0.00581EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/04/24 12:00 a.m.•58 views

RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:1132)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1132 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. MariaD...

9.8CVSS7.1AI score0.30146EPSS
SaveExploits12References119
FreeBSD
FreeBSD
•added 2024/04/24 12:00 a.m.•50 views

py-social-auth-app-django -- Improper Handling of Case Sensitivity

GitHub Advisory Database: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This...

4.9CVSS7.3AI score0.00581EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/04/16 10:15 p.m.•19 views

AZL-49971 CVE-2024-21096 affecting package mariadb for versions less than 10.6.20-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to...

4.9CVSS7.1AI score0.00424EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/04/16 10:15 p.m.•23 views

AZL-49936 CVE-2024-21096 affecting package mariadb for versions less than 10.11.10-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to...

4.9CVSS7.1AI score0.00424EPSS
SaveExploits0References1
Redos
Redos
•added 2024/04/09 12:00 a.m.•38 views

ROS-20240409-16

MariaDB spiderdbmbase::printwarnings function vulnerability is related to pointer dereferencing errors. pointer dereferencing errors. Exploitation of the vulnerability allows a remote intruder to cause a denial of service. service...

6.5CVSS7.2AI score0.01486EPSS
SaveExploits0
Redos
Redos
•added 2024/04/04 12:00 a.m.•38 views

ROS-20240404-18

Vulnerability in the OpenVAS database management system's OpenVAS scanning and vulnerability management tool MariaDB is associated with uncontrolled resource consumption when connecting to ports 3306 and 4567. Exploitation exploitation of the vulnerability could allow a remote attacker to cause a...

7.5CVSS6.8AI score0.02237EPSS
SaveExploits0
osv_azl
osv_azl
•added 2024/03/25 11:15 p.m.•16 views

AZL-37112 CVE-2024-0901 affecting package mariadb for versions less than 10.11.6-3

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length...

9.1CVSS5.8AI score0.00694EPSS
SaveExploits1References1
Rows per page
Query Builder