Lucene search

K
redhatcveRedhat.comRH:CVE-2024-22513
HistoryMar 16, 2024 - 6:23 p.m.

CVE-2024-22513

2024-03-1618:23:29
redhat.com
access.redhat.com
11
cve-2024-22513
djangorestframework-simplejwt
information disclosure
user validation checks

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

46.1%

A flaw was found in djangorestframework-simplejwt. Affected versions of this package are vulnerable to information disclosure. This flaw allows a user to access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

46.1%