CVE-2019-13177
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-13177
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Django REST Registration library 数据伪造问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 django-rest-registration (aka Django REST Registration library)0.5.0之前版本中的verification.py文件存在安全漏洞，该漏洞源于程序借助静态字符串来用于签名。远程攻击者可利用该漏洞伪造验证过程。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2019-13177
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-13177
请登录查看更多情报信息。
Same Patch Batch · n/a · 2019-07-02 · 54 CVEs total
| CVE-2019-7266 | Nortek Security & Control Linear eMerge 50P/5000P 授权问题漏洞 | |
| CVE-2019-13148 | TRENDnet TEW-827DRU 命令注入漏洞 | |
| CVE-2019-13153 | TRENDnet TEW-827DRU 命令操作系统命令注入漏洞 | |
| CVE-2019-13150 | TRENDnet TEW-827DRU 命令注入漏洞 | |
| CVE-2019-13151 | TRENDnet TEW-827DRU 命令操作系统命令注入漏洞 | |
| CVE-2019-13152 | TRENDnet TEW-827DRU 命令注入漏洞 | |
| CVE-2019-13149 | TRENDnet TEW-827DRU 命令操作系统命令注入漏洞 | |
| CVE-2019-7269 | Nortek Security & Control Linear eMerge 50P/5000P 操作系统命令注入漏洞 | |
| CVE-2019-7268 | Nortek Security & Control Linear eMerge 50P/5000P 代码问题漏洞 | |
| CVE-2019-7267 | Nortek Security & Control Linear eMerge 50P/5000P 路径遍历漏洞 | |
| CVE-2019-7270 | Nortek Security & Control Linear eMerge 50P/5000P 跨站请求伪造漏洞 | |
| CVE-2019-7265 | Nortek Security＆Control Linear eMerge E3-Series 信任管理问题漏洞 | |
| CVE-2019-7264 | Nortek Security＆Control Linear eMerge E3-Series 缓冲区错误漏洞 | |
| CVE-2019-7263 | Nortek Security＆Control Linear eMerge E3-Series 代码问题漏洞 | |
| CVE-2019-7262 | Nortek Security＆Control Linear eMerge E3-Series 跨站请求伪造漏洞 | |
| CVE-2019-7261 | Nortek Security＆Control Linear eMerge E3-Series 信任管理问题漏洞 | |
| CVE-2019-7260 | Nortek Security＆Control Linear eMerge E3-Series 信任管理问题漏洞 | |
| CVE-2019-7259 | Nortek Security＆Control Linear eMerge E3-Series 信息泄露漏洞 | |
| CVE-2019-7258 | Nortek Security＆Control Linear eMerge E3-Series 权限许可和访问控制问题漏洞 | |
| CVE-2019-7257 | Nortek Security＆Control Linear eMerge E3-Series 代码问题漏洞 |
Showing top 20 of 54 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-13177
No comments yet