CVE-2018-6188
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-6188
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-6188.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2018-6188
- Aliases
- Downstream
- Related
- Published
- 2018-02-05T03:29:00Z
- Modified
- 2025-10-15T09:58:11.090585Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from the confirmloginallowed() method, as demonstrated by discovering whether a user account is inactive.
- References