Поиск уязвимостей
Количество 10
Количество 10
CVE-2024-39329
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password.
CVE-2024-39329
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password.
CVE-2024-39329
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password.
CVE-2024-39329
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2. ...
GHSA-x7q2-wr7g-xqmf
Django vulnerable to user enumeration attack
BDU:2024-07168
Уязвимость метода django.contrib.auth.backends.ModelBackend.authenticate() программной платформы для веб-приложений Django, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
SUSE-SU-2024:2577-1
Security update for python-Django
ALT-PU-2024-10534
ALT-PU-2024-10534: package `python3-module-django` update to version 4.2.14-alt1
SUSE-SU-2024:2545-1
Security update for python-Django
ALT-PU-2025-10176
ALT-PU-2025-10176: package `python3-module-django` update to version 5.2.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-39329 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password. | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-39329 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password. | CVSS3: 3.7 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-39329 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password. | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| CVE-2024-39329 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2. ... | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| GHSA-x7q2-wr7g-xqmf Django vulnerable to user enumeration attack | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
 | BDU:2024-07168 Уязвимость метода django.contrib.auth.backends.ModelBackend.authenticate() программной платформы для веб-приложений Django, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:2577-1 Security update for python-Django | больше 2 лет назад | ||
| ALT-PU-2024-10534 ALT-PU-2024-10534: package `python3-module-django` update to version 4.2.14-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
| SUSE-SU-2024:2545-1 Security update for python-Django | больше 2 лет назад | ||
| ALT-PU-2025-10176 ALT-PU-2025-10176: package `python3-module-django` update to version 5.2.5-alt1 | CVSS3: 9.8 | около 1 года назад |
Уязвимостей на страницу