CVE-2025-13473 | Django up to 4.2.27/5.2.10/6.0.1 check_password timing discrepancy

A vulnerability, which was classified as problematic, was found in Django up to 4.2.27/5.2.10/6.0.1. Affected by this issue is the function check_password of the component django.contrib.auth.handlers.modwsgi.check_password. Such manipulation leads to observable timing discrepancy.

This vulnerability is uniquely identified as CVE-2025-13473. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.