Django Two-factor Authentication Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Django Two-factor Authentication Project records in CISA KEV

No Django Two-factor Authentication Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Django Two-factor Authentication · all components

TI-2020-11880 CVE-2020-15105 · GHSA-vhr6-pvjm-9qwf

LOW 26

Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session (base64-encoded).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00698 Published 2020-07-10 Fixed in 1.12 CWE-312