Information Disclosure

2020-06-2404:00:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

27.1%

JSON

django_basic_auth_ip_whitelist is vulnerable to information disclosure. The vulnerability exists through a timing attack through the applied string comparison function when basic authentication is used.

CPENameOperatorVersion
django-basic-auth-ip-whitelistle0.3.3a0

CPE	Name	Operator	Version
	django-basic-auth-ip-whitelist	le	0.3.3a0

References

github.com/advisories/GHSA-m38j-pmg3-v5x5

github.com/tm-kn/django-basic-auth-ip-whitelist/commit/effe05ed1ed9e1ccc675a65b69d36217e5c5dfc6

github.com/tm-kn/django-basic-auth-ip-whitelist/security/advisories/GHSA-m38j-pmg3-v5x5

groups.google.com/forum/#!msg/django-developers/iAaq0pvHXuA/fpUuwjK3i2wJ

0.001 Low

EPSS

Percentile

27.1%

JSON

Related for VERACODE:25754