From d1bd12dfdcb998edccbb9b619ebc722c99df86a5 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 28 Aug 2024 20:11:42 +0000 Subject: [PATCH] Publish GHSA-2gr8-3wc7-xhj3 --- .../2024/04/GHSA-2gr8-3wc7-xhj3/GHSA-2gr8-3wc7-xhj3.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2024/04/GHSA-2gr8-3wc7-xhj3/GHSA-2gr8-3wc7-xhj3.json b/advisories/github-reviewed/2024/04/GHSA-2gr8-3wc7-xhj3/GHSA-2gr8-3wc7-xhj3.json index 64ff5846f5a..5c7efd4648d 100644 --- a/advisories/github-reviewed/2024/04/GHSA-2gr8-3wc7-xhj3/GHSA-2gr8-3wc7-xhj3.json +++ b/advisories/github-reviewed/2024/04/GHSA-2gr8-3wc7-xhj3/GHSA-2gr8-3wc7-xhj3.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-2gr8-3wc7-xhj3", - "modified": "2024-04-24T21:39:44Z", + "modified": "2024-08-28T20:09:46Z", "published": "2024-04-24T18:47:21Z", "aliases": [ "CVE-2024-32879" ], "summary": "social-auth-app-django affected by Improper Handling of Case Sensitivity", - "details": "### Impact\nDue to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.\n\n### Patches\nThis issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.\n\n### Workarounds\nAn immediate workaround would be to change collation of the affected field:\n\n```mysql\nALTER TABLE `social_auth_association` MODIFY `uid` varchar(255) COLLATE `utf8_bin`;\n```\n\n### References\nThis issue was discovered by folks at https://opencraft.com/.\n", + "details": "### Impact\nDue to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match.\n\n### Patches\nThis issue has been addressed by https://github.com/python-social-auth/social-app-django/pull/566 and fix released in 5.4.1.\n\n### Workarounds\nAn immediate workaround would be to change collation of the affected field:\n\n```mysql\nALTER TABLE `social_auth_usersocialauth` MODIFY `uid` varchar(255) COLLATE `utf8_bin`;\n```\n\n### References\nThis issue was discovered by folks at https://opencraft.com/.\n", "severity": [ { "type": "CVSS_V3",