CVE-2024-45231

score

<0.1

cvss

5.3

epss

0.8%

published

2024-10-08

kev added

—

first seen

2026-10-21

Django v5.1.1, v5.0.9, and v4.2.16 contain an information disclosure caused by password reset form behavior in django.contrib.auth.forms.PasswordResetForm, letting remote attackers enumerate user email addresses by observing password reset request outcomes, exploit requires sending password reset requests with email sending failing.