CVE-2019-10682

CVE-2019-10682 affects django-nopassword versions prior to 5.0.0, where it insecurely stores cleartext secrets directly in the database. This vulnerability carries a high CVSS score of 7.5, indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality compromise. There is currently no evidence of active exploitation, and no public exploit code or Metasploit modules are available. Furthermore, the vulnerability has garnered minimal community discussion or media coverage, suggesting a low profile among threat actors.