EUVD-2020-0065

Malware in sbrugna...

CVE-2020-15105

Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session base64-encoded. The password is stored in the session when the user submits their username and password, and is removed once they complete authentication by entering a two-factor...

CVE-2020-15105: Cleartext Storage of Sensitive Information

Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session base64-encoded. The password is stored in the session when the user submits their username and password, and is removed once they complete authentication by entering a two-factor...

PT-2020-14188

Name of the Vulnerable Software and Affected Versions Django Two-Factor Authentication versions prior to 1.12 Description The issue allows the storage of a user's password in clear text in the user session, which can be base64-encoded. This occurs when a user submits their username and password a...