CVE-2024-22513

Name of the Vulnerable Software and Affected Versions djangorestframework-simplejwt versions 5.3.1 and before

Description The issue is related to information disclosure due to missing user validation checks via the for user method. This allows a user to access web application resources even after their account has been disabled. The vulnerability is associated with a lack of protection for sensitive data.

Recommendations For versions 5.3.1 and before, consider adding user validation checks to the for user method to prevent unauthorized access to web application resources. As a temporary workaround, restrict access to resources that can be accessed via the for user method until a patch is available.