Количество 6
Количество 6
CVE-2024-22513
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.
CVE-2024-22513
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.
CVE-2024-22513
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.
CVE-2024-22513
djangorestframework-simplejwt version 5.3.1 and before is vulnerable t ...
GHSA-5vcc-86wm-547q
Improper Privilege Management in djangorestframework-simplejwt
BDU:2024-04357
Уязвимость плагина аутентификации веб-токенов JSON djangorestframework-simplejwt программной платформы для веб-приложений Django, позволяющая нарушителю раскрыть защищаемую информацию
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22513 djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | CVE-2024-22513 djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | CVE-2024-22513 djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
| CVE-2024-22513 djangorestframework-simplejwt version 5.3.1 and before is vulnerable t ... | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
| GHSA-5vcc-86wm-547q Improper Privilege Management in djangorestframework-simplejwt | 0% Низкий | больше 1 года назад | |
 | BDU:2024-04357 Уязвимость плагина аутентификации веб-токенов JSON djangorestframework-simplejwt программной платформы для веб-приложений Django, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу