django-jet vulnerabilities

In geex-arts django-jet up to version 1.0.8, a cross-site request forgery vulnerability exists in the OAuth Handler component. The attack can be performed remotely, and the exploit is publicly available. The project was notified but has not responded.

A security flaw was discovered in django-jet up to version 1.0.8 in the OAuth Credential Revoke Handler component. Missing authorization in this function allows remote attacks without required privileges. The exploit has been publicly released and may be used in real attacks.

A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module. Such manipulation leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.