logo

Database

Weak credential policy In python-django

Description

information disclosure

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2018-169842. NVD-2018-169843. OSV-2018-169844. GHSA-6mx3-3vqg-hpp25. GCVE-2018-16984

References

1. https://github.com/django/django/commit/bf39978a53f117ca02e9a0c78b76664a41a547452. https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2018-3.yaml3. https://security.netapp.com/advisory/ntap-20190502-00094. https://web.archive.org/web/20200517123022/http://www.securitytracker.com/id/10417495. https://www.djangoproject.com/weblog/2018/oct/01/security-release

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.