CVE-2024-45231
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Oct 8, 2024
Updated: Mar 17, 2025
CWE ID 203
Summary
CVE-2024-45231 is a vulnerability affecting Django versions 5.1.1, 5.0.9, and 4.2.16. In these versions, the django.contrib.auth.forms.PasswordResetForm class used in password reset flows allows remote attackers to enumerate user email addresses through a technique called email address enumeration. This occurs when password reset requests are consistently failing, revealing the target email address in the error message.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Django
Affected Vendors
- Django Software Foundation