1 result · Feed
-
Critical 9.8
Improper Verification of Cryptographic Signature in django-rest-registration
verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs be…