Security Advisory

CVE-2024-22513

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-16 00:00:00
Last updated 2024-11-01 19:28:30
Assigner mitre
State PUBLISHED

Description

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.