Djangoproject Django version 1.9.2 : Security vulnerabilities, CVEs Information leak published in 2016

cpe:2.3:a:djangoproject:django:1.9.2:*:*:*:*:*:*:*

CVE-2016-2513

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

Max CVSS

3.1

EPSS Score

0.72%

Published

2016-04-08

Updated

2017-09-08

1 vulnerabilities found

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!

Accept Close

Djangoproject » Django » 1.9.2 : Security Vulnerabilities, CVEs, Published In 2016 (Information Leak)

CVE-2016-2513