Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Styria Subscribe
Filtered by product Django-rest-framework-json Web Tokens
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10594 1 Styria 1 Django-rest-framework-json Web Tokens 2020-03-19 5.8 MEDIUM 9.1 CRITICAL
An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refresh feature. NOTE: drf-jwt is a fork of jpadilla/django-rest-framework-jwt, which is unmaintained.