Skip to content
OpenAdvisories

Package · PyPI

django-basic-auth-ip-whitelist

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.2
    CVE-2020-4071

    Timing attack on django-basic-auth-ip-whitelist

    In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD is set. Currently the string comparison between configured credent…

    tm-kn django-basic-auth-ip-whitelist django-basic-auth-ip-whitelist PyPI