Design/Logic Flaw

verification.py in django-rest-registration aka Django REST Registration library before 0.5.0 relies on a static string for signatures i.e., the Django Signing API is misused, which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to...

CVE-2019-13177

verification.py in django-rest-registration aka Django REST Registration library before 0.5.0 relies on a static string for signatures i.e., the Django Signing API is misused, which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to...

PT-2019-20172

Name of the Vulnerable Software and Affected Versions django-rest-registration versions prior to 0.5.0 Description The issue arises from the misuse of the Django Signing API in the verification.py file, where a static string is used for signatures. This allows remote attackers to spoof the...