Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django REST Registration library 数据伪造问题漏洞
Vulnerability Description
Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 django-rest-registration (aka Django REST Registration library)0.5.0之前版本中的verification.py文件存在安全漏洞，该漏洞源于程序借助静态字符串来用于签名。远程攻击者可利用该漏洞伪造验证过程。
CVSS Information
N/A
Vulnerability Type
N/A