CVE-2025-4894 - CVE House
Back to Database
Status published Medium CVE-2025-4894

calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption

Vulnerability Description

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function gen_rsa_keys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4894

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • dev03303 (VulDB User)

References

Affected Vendor

Affected Software

Django-sso-server
Vulnerable Versions:
057247929a94ffc358788a37ab99e391379a4d15

Timeline

Official Publish: May 18th, 2025
Last Modified: May 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-326 CWE-310

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.