AIKIDO-2024-10054
social-auth-app-django is vulnerable to Incorrect Implementation of Authentication Algorithm
50
Medium Risk
This Affects:
social-auth-app-djangoTL;DR
Affected versions of the package are vulnerable to improper handling of case sensitivity. Due to the default case-insensitive collation in MySQL or MariaDB databases, user IDs are not case-sensitive, which could lead to different IDs being mistakenly treated as a match.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
social-auth-app-django is vulnerable to Incorrect Implementation of Authentication Algorithm in versions 0.0.1 - 5.4.0.
How to fix this
Upgrade the social-auth-app-django library to the patch version.
Links
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant