30 matches found
Improper Access Control
allauth-django is vulnerable to improper access control. The vulnerability is due to previously issued access and refresh tokens remaining valid even after a user account is marked as isactive=False, which allows an attacker to continue authenticating and accessing protected resources using those...
5.4CVSS6.9AI score0.00165EPSS
SaveExploits0References4Affected Software1
20