46 matches found
alcali (>=2018.3.1, <=3006.3.0), arccanet (>=0.0.1, <=0.0.7) +70 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (>=4.3.0, <=5.5.0)
djangorestframework-simplejwt PYPI version =4.3.0, =2018.3.1, =0.0.1, =0.0.6, =0.0.8, =1.0.0, =0.0.3, =1.0.0, =0.1.7, =0.4.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =1.3.8 and more Source cves: CVE-2024-22513 Source advisory: MEND:CVE-2024-22513...
CVE-2024-22513
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...
CVE-2024-22513: Missing Authentication for Critical Function
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...
CVE-2024-22513
The djangorestframework-simplejwt library (versions 5.3.1 and before ) is vulnerable to information disclosure due to missing user validation checks in the for_user method. This allows a user to access web application resources even after their account has been disabled . Exploiting this can lead...
PT-2024-3946
Name of the Vulnerable Software and Affected Versions djangorestframework-simplejwt versions 5.3.1 and before Description The issue is related to information disclosure due to missing user validation checks via the for user method. This allows a user to access web application resources even after...
