| शीर्षक | liangliangyy DjangoBlog <= 2.1.0.0 Security Misconfiguration + Hardcoded Credentials |
|---|
| विवरण | DjangoBlog through x.x.x.x configures ALLOWED_HOSTS with a wildcard '*' in djangoblog/settings.py, disabling Django's Host header validation. This allows HTTP Host header injection attacks including cache poisoning and password reset link hijacking.DjangoBlog through x.x.x.x has weak authentication on the file upload endpoint in blog/views.py. The /upload endpoint is decorated with @csrf_exempt and authenticates only via a static HMAC signature derived from the Django SECRET_KEY. Since the SECRET_KEY has a hardcoded fallback (see separate CVE for Vuln-3), the upload signature is computable by anyone, enabling unauthenticated arbitrary file uploads. |
|---|
| स्रोत | ⚠️ https://github.com/3em0/cve_repo/blob/main/DjangoBlog/Vuln-11-Weak-File-Upload-Auth.md |
|---|
| उपयोगकर्ता | Dem0 (UID 82596) |
|---|
| सबमिशन | 26/03/2026 05:52 PM (6 महीनों पहले) |
|---|
| संयम | 19/04/2026 06:06 PM (24 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 358246 [liangliangyy DjangoBlog तक 2.1.0.0 File Upload Endpoint djangoblog/settings.py SECRET_KEY कमजोर एन्क्रिप्शन] |
|---|
| अंक | 20 |
|---|