HOMEVULNERABILITIESVENDORSDjango-rest-registration Project

Django-rest-registration ProjectCVEs & Vulnerabilities

1 CVEs affecting Django-rest-registration Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

django-rest-registration 1
CVE-2019-13177CRITICAL

verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument.

3 Jul 2019
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database