Lucene search
K

4 matches found

SUSE CVE
SUSE CVE
added 2024/03/19 3:37 a.m.6 views

SUSE CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

5.5CVSS6.7AI score0.00804EPSS
Exploits3References3
Github Security Blog
Github Security Blog
added 2024/03/16 9:30 a.m.124 views

Improper Privilege Management in djangorestframework-simplejwt

djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

5.5CVSS5.2AI score0.00804EPSS
Exploits3References11Affected Software1
OSV
OSV
added 2024/03/16 9:30 a.m.0 views

GHSA-5VCC-86WM-547Q Improper Privilege Management in djangorestframework-simplejwt

djangorestframework-simplejwt before version 5.5.1 is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

5.5CVSS5.8AI score0.00804EPSS
Exploits3References11
CNNVD
CNNVD
added 2024/03/16 12:0 a.m.5 views

Simple JWT Security Vulnerability

Simple JWT is Jazzband open source a JSON Web Token authentication plugin for Django REST Framework. Simple JWT version 5.3.1 and earlier versions have a security vulnerability , the vulnerability stems from the lack of user authentication checks through the foruser method . An attacker can explo...

5.5CVSS6.8AI score0.00804EPSS
Exploits3References6
Rows per page
Query Builder