Djoser vulnerabilities
We track 1 vulnerability in Djoser products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 13, 2024.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Djoser vulnerabilities
- 7.1 High severity
djoser: Improper Authentication
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually