Vendor
py-bcrypt
Products
1
CVEs
1
Across products
1
Status
Private
Products
1- py-bcrypt1 CVEpypi
Recent CVEs
1| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2013-1895 | Hig | 0.49 | 7.5 | 0.03 | Jan 28, 2020 | The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten. |
- risk 0.49cvss 7.5epss 0.03
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.