CVE-2024-32879
social-auth-app-django Improper Handling of Case Sensitivity vulnerability
4.9 MediumFix available
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
0.58%Up 0.5 points since Apr 25, 2024
What each source reports
CVE List Score used
social-auth-app-django Improper Handling of Case Sensitivity vulnerability
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
- Record
CVE-2024-32879- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-178, CWE-303
- Updated
- 2026-11-02
EUVDEUVD-2024-1061
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
- Record
EUVD-2024-1061- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2gr8-3wc7-xhj3
social-auth-app-django affected by Improper Handling of Case Sensitivity
Impact
Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.
Patches
This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.
Workarounds
An immediate workaround would be to change collation of the affected field:
ALTER TABLE `social_auth_usersocialauth` MODIFY `uid` varchar(255) COLLATE `utf8_bin`;
References
This issue was discovered by folks at https://opencraft.com/.
- Record
GHSA-2gr8-3wc7-xhj3- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-178, CWE-303
- Updated
- 2026-11-02
NVD
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
- Record
CVE-2024-32879- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-178, CWE-303
- Updated
- 2026-11-02
OSV
social-auth-app-django Improper Handling of Case Sensitivity vulnerability
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
- Record
CVE-2024-32879- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-178, CWE-303
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-32879
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
- Record
DEBIAN-CVE-2024-32879- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
Show 7 moreShow less
OSVGHSA-2gr8-3wc7-xhj3
social-auth-app-django affected by Improper Handling of Case Sensitivity
Impact
Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.
Patches
This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.
Workarounds
An immediate workaround would be to change collation of the affected field:
ALTER TABLE `social_auth_usersocialauth` MODIFY `uid` varchar(255) COLLATE `utf8_bin`;
References
This issue was discovered by folks at https://opencraft.com/.
- Record
GHSA-2gr8-3wc7-xhj3- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Weakness
- CWE-178, CWE-303
- Updated
- 2026-11-02
OSVPYSEC-2026-1931
social-auth-app-django affected by Improper Handling of Case Sensitivity
Impact
Due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.
Patches
This issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.
Workarounds
An immediate workaround would be to change collation of the affected field:
ALTER TABLE `social_auth_usersocialauth` MODIFY `uid` varchar(255) COLLATE `utf8_bin`;
References
This issue was discovered by folks at https://opencraft.com/.
- Record
PYSEC-2026-1931- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2024:3781
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
- Record
RHSA-2024:3781- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:6428
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
- Record
RHSA-2024:6428- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-32879
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match. This issue has been addressed by a fix released in version 5.4.1. An immediate workaround would be to change collation of the affected field.
- Record
UBUNTU-CVE-2024-32879- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14036-1 No score
python310-social-auth-app-django-5.4.1-1.1 on GA media
These are all security issues fixed in the python310-social-auth-app-django-5.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14036-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12043-1 No score
python313-social-auth-app-django-5.9.0-1.2 on GA media
These are all security issues fixed in the python313-social-auth-app-django-5.9.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12043-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
social-auth-app-djangoPyPI |
before 5.4.1 | 5.4.1 |
social-auth-app-djangoDebian:12 |
All versions, plus listed versions 5.0.0-15.2.0-15.2.0-25.4.0-15.4.1-1 Show 8 moreShow less5.4.2-15.4.3-15.6.0-15.7.0-15.8.0-15.9.0-16.0.0-16.0.1-1 |
None known |
social-auth-app-djangoDebian:13 |
before 5.4.1-1 | 5.4.1-1 |
social-auth-app-djangoDebian:14 |
before 5.4.1-1 | 5.4.1-1 |
social-auth-app-djangoPyPI |
before 5.4.1, plus listed versions 0.0.10.1.01.0.01.0.11.1.0 Show 13 moreShow less1.2.02.0.02.1.03.0.03.1.03.3.03.4.04.0.05.0.05.1.05.2.05.3.05.4.0 |
5.4.1 |
automation-controller-venv-towerRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:4.5.7-1.el8ap | 0:4.5.7-1.el8ap |
automation-controller-venv-towerRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:4.5.7-1.el9ap | 0:4.5.7-1.el9ap |
receptorRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el8ap | 0:1.4.8-1.el8ap |
receptorctlRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el8ap | 0:1.4.8-1.el8ap |
receptorRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el8ap | 0:1.4.8-1.el8ap |
Show 150 moreShow less
| Package | Affected | Fixed |
|---|---|---|
receptorctlRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el8ap | 0:1.4.8-1.el8ap |
receptorRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el8ap | 0:1.4.8-1.el8ap |
receptorctlRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el8ap | 0:1.4.8-1.el8ap |
receptorRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el9ap | 0:1.4.8-1.el9ap |
receptorctlRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el9ap | 0:1.4.8-1.el9ap |
receptorRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el9ap | 0:1.4.8-1.el9ap |
receptorctlRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el9ap | 0:1.4.8-1.el9ap |
receptorRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el9ap | 0:1.4.8-1.el9ap |
receptorctlRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.4.8-1.el9ap | 0:1.4.8-1.el9ap |
python39-cryptographyRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python39-cryptography-debuginfoRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python3x-cryptographyRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python3x-cryptography-debugsourceRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python39-cryptographyRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python39-cryptography-debuginfoRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python3x-cryptographyRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python3x-cryptography-debugsourceRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python39-cryptographyRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python39-cryptography-debuginfoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python3x-cryptographyRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python3x-cryptography-debugsourceRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el8ap | 0:42.0.5-1.el8ap |
python-cryptographyRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python-cryptography-debugsourceRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python3-cryptographyRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python3-cryptography-debuginfoRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python-cryptographyRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python-cryptography-debugsourceRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python3-cryptographyRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python3-cryptography-debuginfoRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python-cryptographyRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python-cryptography-debugsourceRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python3-cryptographyRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python3-cryptography-debuginfoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:42.0.5-1.el9ap | 0:42.0.5-1.el9ap |
python39-pillowRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el8ap | 0:10.3.0-1.el8ap |
python39-pillow-debuginfoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el8ap | 0:10.3.0-1.el8ap |
python3x-pillowRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el8ap | 0:10.3.0-1.el8ap |
python3x-pillow-debugsourceRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el8ap | 0:10.3.0-1.el8ap |
python-pillowRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el9ap | 0:10.3.0-1.el9ap |
python-pillow-debugsourceRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el9ap | 0:10.3.0-1.el9ap |
python3-pillowRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el9ap | 0:10.3.0-1.el9ap |
python3-pillow-debuginfoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:10.3.0-1.el9ap | 0:10.3.0-1.el9ap |
python39-gunicornRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.0.0-1.el8ap | 0:22.0.0-1.el8ap |
python3x-gunicornRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.0.0-1.el8ap | 0:22.0.0-1.el8ap |
python-gunicornRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.0.0-1.el9ap | 0:22.0.0-1.el9ap |
python3-gunicornRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.0.0-1.el9ap | 0:22.0.0-1.el9ap |
python39-idnaRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.7-1.el8ap | 0:3.7-1.el8ap |
python3x-idnaRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.7-1.el8ap | 0:3.7-1.el8ap |
python39-idnaRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.7-1.el8ap | 0:3.7-1.el8ap |
python3x-idnaRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.7-1.el8ap | 0:3.7-1.el8ap |
python-idnaRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.7-1.el9ap | 0:3.7-1.el9ap |
python3-idnaRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.7-1.el9ap | 0:3.7-1.el9ap |
python-idnaRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.7-1.el9ap | 0:3.7-1.el9ap |
python3-idnaRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.7-1.el9ap | 0:3.7-1.el9ap |
python39-pydanticRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.10.15-1.el8ap | 0:1.10.15-1.el8ap |
python3x-pydanticRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:1.10.15-1.el8ap | 0:1.10.15-1.el8ap |
python-pydanticRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.10.15-1.el9ap | 0:1.10.15-1.el9ap |
python3-pydanticRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:1.10.15-1.el9ap | 0:1.10.15-1.el9ap |
python39-sqlparseRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:0.5.0-1.el8ap | 0:0.5.0-1.el8ap |
python3x-sqlparseRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:0.5.0-1.el8ap | 0:0.5.0-1.el8ap |
python-sqlparseRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:0.5.0-1.el9ap | 0:0.5.0-1.el9ap |
python3-sqlparseRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:0.5.0-1.el9ap | 0:0.5.0-1.el9ap |
python39-blackRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el8ap | 0:22.8.0-2.el8ap |
python3x-blackRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el8ap | 0:22.8.0-2.el8ap |
python39-blackRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el8ap | 0:22.8.0-2.el8ap |
python3x-blackRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el8ap | 0:22.8.0-2.el8ap |
python39-blackRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el8ap | 0:22.8.0-2.el8ap |
python3x-blackRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el8ap | 0:22.8.0-2.el8ap |
python-blackRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el9ap | 0:22.8.0-2.el9ap |
python3-blackRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el9ap | 0:22.8.0-2.el9ap |
python-blackRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el9ap | 0:22.8.0-2.el9ap |
python3-blackRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el9ap | 0:22.8.0-2.el9ap |
python-blackRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el9ap | 0:22.8.0-2.el9ap |
python3-blackRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:22.8.0-2.el9ap | 0:22.8.0-2.el9ap |
python39-aiohttpRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el8ap | 0:3.9.5-1.el8ap |
python39-aiohttp-debuginfoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el8ap | 0:3.9.5-1.el8ap |
python3x-aiohttpRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el8ap | 0:3.9.5-1.el8ap |
python3x-aiohttp-debugsourceRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el8ap | 0:3.9.5-1.el8ap |
python-aiohttpRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el9ap | 0:3.9.5-1.el9ap |
python-aiohttp-debugsourceRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el9ap | 0:3.9.5-1.el9ap |
python3-aiohttpRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el9ap | 0:3.9.5-1.el9ap |
python3-aiohttp-debuginfoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.9.5-1.el9ap | 0:3.9.5-1.el9ap |
automation-hubRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:4.9.2-1.el8ap | 0:4.9.2-1.el8ap |
python39-galaxy-ngRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:4.9.2-1.el8ap | 0:4.9.2-1.el8ap |
python3x-galaxy-ngRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:4.9.2-1.el8ap | 0:4.9.2-1.el8ap |
automation-hubRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:4.9.2-1.el9ap | 0:4.9.2-1.el9ap |
python-galaxy-ngRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:4.9.2-1.el9ap | 0:4.9.2-1.el9ap |
python3-galaxy-ngRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:4.9.2-1.el9ap | 0:4.9.2-1.el9ap |
python39-social-auth-app-djangoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:5.4.1-1.el8ap | 0:5.4.1-1.el8ap |
python3x-social-auth-app-djangoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:5.4.1-1.el8ap | 0:5.4.1-1.el8ap |
python-social-auth-app-djangoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:5.4.1-1.el9ap | 0:5.4.1-1.el9ap |
python3-social-auth-app-djangoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:5.4.1-1.el9ap | 0:5.4.1-1.el9ap |
python39-jinja2Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el8ap | 0:3.1.4-1.el8ap |
python3x-jinja2Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el8ap | 0:3.1.4-1.el8ap |
python39-jinja2Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el8ap | 0:3.1.4-1.el8ap |
python3x-jinja2Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el8ap | 0:3.1.4-1.el8ap |
python39-jinja2Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el8ap | 0:3.1.4-1.el8ap |
python3x-jinja2Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el8ap | 0:3.1.4-1.el8ap |
python-jinja2Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el9ap | 0:3.1.4-1.el9ap |
python3-jinja2Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el9ap | 0:3.1.4-1.el9ap |
python-jinja2Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el9ap | 0:3.1.4-1.el9ap |
python3-jinja2Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el9ap | 0:3.1.4-1.el9ap |
python-jinja2Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el9ap | 0:3.1.4-1.el9ap |
python3-jinja2Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:3.1.4-1.el9ap | 0:3.1.4-1.el9ap |
python39-requestsRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el8ap | 0:2.32.2-1.el8ap |
python3x-requestsRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el8ap | 0:2.32.2-1.el8ap |
python39-requestsRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el8ap | 0:2.32.2-1.el8ap |
python3x-requestsRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el8ap | 0:2.32.2-1.el8ap |
python-requestsRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el9ap | 0:2.32.2-1.el9ap |
python3-requestsRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el9ap | 0:2.32.2-1.el9ap |
python-requestsRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el9ap | 0:2.32.2-1.el9ap |
python3-requestsRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs |
before 0:2.32.2-1.el9ap | 0:2.32.2-1.el9ap |
python39-zippRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el8ap | 0:3.19.2-1.el8ap |
python39-zippRed Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el8ap | 0:3.19.2-1.el8ap |
python39-zippRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el8ap | 0:3.19.2-1.el8ap |
python-zippRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el9ap | 0:3.19.2-1.el9ap |
python3-zippRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el9ap | 0:3.19.2-1.el9ap |
python-zippRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el9ap | 0:3.19.2-1.el9ap |
python3-zippRed Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el9ap | 0:3.19.2-1.el9ap |
python-zippRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el9ap | 0:3.19.2-1.el9ap |
python3-zippRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:3.19.2-1.el9ap | 0:3.19.2-1.el9ap |
automation-controller-venv-towerRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el8ap | 0:4.5.10-1.el8ap |
automation-controller-venv-towerRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el9ap | 0:4.5.10-1.el9ap |
python39-grpcioRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el8ap | 0:1.58.3-1.el8ap |
python39-grpcio-debuginfoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el8ap | 0:1.58.3-1.el8ap |
python3x-grpcioRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el8ap | 0:1.58.3-1.el8ap |
python3x-grpcio-debugsourceRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el8ap | 0:1.58.3-1.el8ap |
python-grpcioRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el9ap | 0:1.58.3-1.el9ap |
python-grpcio-debugsourceRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el9ap | 0:1.58.3-1.el9ap |
python3-grpcioRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el9ap | 0:1.58.3-1.el9ap |
python3-grpcio-debuginfoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:1.58.3-1.el9ap | 0:1.58.3-1.el9ap |
python39-djangoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.2.15-1.el8ap | 0:4.2.15-1.el8ap |
python3x-djangoRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.2.15-1.el8ap | 0:4.2.15-1.el8ap |
python-djangoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.2.15-1.el9ap | 0:4.2.15-1.el9ap |
python3-djangoRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.2.15-1.el9ap | 0:4.2.15-1.el9ap |
automation-controllerRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el8ap | 0:4.5.10-1.el8ap |
automation-controller-cliRed Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el8ap | 0:4.5.10-1.el8ap |
automation-controllerRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el8ap | 0:4.5.10-1.el8ap |
automation-controller-cliRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el8ap | 0:4.5.10-1.el8ap |
automation-controller-serverRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el8ap | 0:4.5.10-1.el8ap |
automation-controller-uiRed Hat:ansible_automation_platform:2.4::el8 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el8ap | 0:4.5.10-1.el8ap |
automation-controllerRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el9ap | 0:4.5.10-1.el9ap |
automation-controller-cliRed Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el9ap | 0:4.5.10-1.el9ap |
automation-controllerRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el9ap | 0:4.5.10-1.el9ap |
automation-controller-cliRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el9ap | 0:4.5.10-1.el9ap |
automation-controller-serverRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el9ap | 0:4.5.10-1.el9ap |
automation-controller-uiRed Hat:ansible_automation_platform:2.4::el9 From an advisory covering 13 CVEs |
before 0:4.5.10-1.el9ap | 0:4.5.10-1.el9ap |
python-social-authUbuntu:16.04:LTS |
All versions, plus listed versions 0.2.1-2build10.2.13-1 |
None known |
python-social-authUbuntu:18.04:LTS |
All versions, plus listed versions 1:0.2.21+dfsg-1 |
None known |
python-social-auth-app-djangoopenSUSE:Tumbleweed |
before 5.4.1-1.1 | 5.4.1-1.1 |
python-social-auth-app-djangoopenSUSE:Tumbleweed |
before 5.9.0-1.2 | 5.9.0-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-32879 is a medium vulnerability (CVSS 4.9) in Python-social-auth Social-app-django, published April 24, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. Fixed in social-auth-app-django 5.4.1.
References
github.com/python-social-auth/social-app-django/security/advisories/GHSA-2gr8-3wc7-xhj3
nvd.nist.gov/vuln/detail/CVE-2024-32879
Show 178 moreShow less
security-tracker.debian.org/tracker/CVE-2024-32879
pypi.org/project/social-auth-app-django
access.redhat.com/errata/RHSA-2024:3781
bugzilla.redhat.com/show_bug.cgi?id=2250765
issues.redhat.com/browse/AAH-3111
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3781.json
cve.org/CVERecord?id=CVE-2023-5752
mail.python.org/archives/list/[email protected]/thread/F4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL
nowotarski.info/http2-continuation-flood
pkg.go.dev/vuln/GO-2024-2687
kb.cert.org/vuls/id/421644
openwall.com/lists/oss-security/2024/03/08/4
go.dev/cl/569341
groups.google.com/g/golang-announce/c/5pwGVUPoMbg
security.netapp.com/advisory/ntap-20240329-0004
devhub.checkmarx.com/cve-details/CVE-2023-50447
duartecsantos.github.io/2023-01-02-CVE-2023-50447
huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1
security.snyk.io/vuln/SNYK-PYTHON-BLACK-6256273
djangoproject.com/weblog/2024/mar/04/security-releases
ubuntu.com/security/CVE-2024-32879
suse.com/security/cve/CVE-2024-32879