Vulnerability Bulletins |
DSA-4598 python-django - security update |
|
| Affected software | Debian |
|
Simon Charette reported that the password reset functionality in Django,a high-level Python web development framework, uses a Unicodecase-insensitive query to retrieve accounts matching the email addressrequesting the password reset. An attacker can take advantage of thisflaw to potentially retrieve password reset tokens and hijack accounts. More info: https://www.debian.org/security/2020/dsa-4598 |
|