Lucene search

K
cveMitreCVE-2024-22513
HistoryMar 16, 2024 - 7:15 a.m.

CVE-2024-22513

2024-03-1607:15:06
mitre
web.nvd.nist.gov
40
cve-2024-22513
djangorestframework-simplejwt
information disclosure
user validation
nvd

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

46.1%

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

46.1%