PT-2021-14491

Name of the Vulnerable Software and Affected Versions django-registration versions prior to 3.1.2 Description The django-registration package has an issue where the base user-account registration view does not properly apply filters to sensitive data. This can result in sensitive data being...

CVE-2021-21416: Generation of Error Message Containing Sensitive Information

django-registration is a user registration package for Django. The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account registration view did not properly apply filters...

Authentication flaw

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...