Skip to content
OpenAdvisories

Archive

5 February 2018

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5

    Django vulnerable to information leakage in AuthenticationForm

    django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from the confirm_login_allowed() method, as demonstrated by discove…