Archive
5 February 2018
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 7.5
Django vulnerable to information leakage in AuthenticationForm
django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from the confirm_login_allowed() method, as demonstrated by discove…