Improper Check for Unusual or Exceptional Conditions Affecting django package, versions [,4.2.16) [5.0a1,5.0.9) [5.1a1,5.1.1)
Threat Intelligence
EPSS
0.05% (22nd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-DJANGO-7886958
- published 4 Sep 2024
- disclosed 3 Sep 2024
- credit Thibaut Spriet
Introduced: 3 Sep 2024
CVE-2024-45231 Open this link in a new tabHow to fix?
Upgrade django to version 4.2.16, 5.0.9, 5.1.1 or higher.
Overview
Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions due to unhandled email sending failures in the django.contrib.auth.forms.PasswordResetForm class. This allows attackers to enumerate user email addresses by brute forcing password reset requests and observing the outcomes.