Skip to content
OpenAdvisories

Package · PyPI

django-two-factor-auth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.4
    CVE-2020-15105

    In Django Two-Factor Authentication, user passwords are stored in clear text in the Django session

    Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session (base64-encoded). The password is stored in the session when the user submits their username and password, and is removed once they complete authenticat…

    Bouke django-two-factor-auth django-two-factor-auth PyPI