apragacz/django-rest-registration

apragacz/django-rest-registration

GitHubGitHub
GitHubgithub.com
django-rest-registration.readthedocs.iodjango-rest-registration.readthedocs.io
Releases45
Frequency2 months 1 week
Last Release
Stars549
User-related REST API based on the awesome Django REST Framework
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-13177↗
—7.5 HIGH

verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument.