Описание
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.
EPSS
5.5 Medium
CVSS3
Дефекты
Связанные уязвимости
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.
djangorestframework-simplejwt version 5.3.1 and before is vulnerable t ...
Improper Privilege Management in djangorestframework-simplejwt
Уязвимость плагина аутентификации веб-токенов JSON djangorestframework-simplejwt программной платформы для веб-приложений Django, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
5.5 Medium
CVSS3