CVE-2025-4894CWE-326

calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption

Medium · published May 18, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function gen_rsa_keys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00273 · 18.6th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2025-05-18T20:00Z
EPSS history
Timeline
  • 18 MAY 20:00Z
    calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption
    cvelistv5