Количество 7
Количество 7
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The dja ...
GHSA-rrqc-c2jx-6jgv
Django allows enumeration of user e-mail addresses
SUSE-SU-2024:3161-1
Security update for python-Django
SUSE-SU-2024:3139-1
Security update for python-Django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing). | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
 | CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing). | CVSS3: 3.7 | 0% Низкий | 10 месяцев назад |
 | CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing). | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
| CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The dja ... | CVSS3: 5.3 | 0% Низкий | 8 месяцев назад |
| GHSA-rrqc-c2jx-6jgv Django allows enumeration of user e-mail addresses | CVSS3: 3.7 | 0% Низкий | 8 месяцев назад |
 | SUSE-SU-2024:3161-1 Security update for python-Django | 10 месяцев назад | ||
| SUSE-SU-2024:3139-1 Security update for python-Django | 10 месяцев назад |
Уязвимостей на страницу