Количество 9
Количество 9
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).
CVE-2024-45231
An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The dja ...
GHSA-rrqc-c2jx-6jgv
Django allows enumeration of user e-mail addresses
BDU:2025-09401
Уязвимость программной платформы для веб-приложений Django, связанная с недостатками механизма формирования отчетов об ошибках, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации
SUSE-SU-2024:3161-1
Security update for python-Django
SUSE-SU-2024:3139-1
Security update for python-Django
ROS-20250729-01
Множественные уязвимости python3-django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing). | CVSS3: 5.3 | 0% Низкий | около 1 года назад | |
CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing). | CVSS3: 3.7 | 0% Низкий | больше 1 года назад | |
CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing). | CVSS3: 5.3 | 0% Низкий | около 1 года назад | |
CVE-2024-45231 An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The dja ... | CVSS3: 5.3 | 0% Низкий | около 1 года назад | |
GHSA-rrqc-c2jx-6jgv Django allows enumeration of user e-mail addresses | CVSS3: 3.7 | 0% Низкий | около 1 года назад | |
BDU:2025-09401 Уязвимость программной платформы для веб-приложений Django, связанная с недостатками механизма формирования отчетов об ошибках, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации | CVSS3: 5.3 | 0% Низкий | 9 месяцев назад | |
SUSE-SU-2024:3161-1 Security update for python-Django | больше 1 года назад | |||
SUSE-SU-2024:3139-1 Security update for python-Django | больше 1 года назад | |||
ROS-20250729-01 Множественные уязвимости python3-django | CVSS3: 7.5 | 5 месяцев назад |
Уязвимостей на страницу