AVG-1081 log
| Package | python2-django |
| Status | Fixed |
| Severity | High |
| Type | insufficient validation |
| Affected | 1.11.26-1 |
| Fixed | 1.11.27-1 |
| Current | Removed |
| Ticket | None |
| Created | Thu Dec 19 21:31:01 2019 |
| Advisory | Pending |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2019-19844 | High | Yes | Insufficient validation | Django's password-reset form uses a case-insensitive query to retrieve accounts matching the email address requesting the password reset. Because this... |