verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof t…
CVSS 3.0CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01635·Published 2019-07-02·Fixed in 0.5.0CWE-347