| Название | liangliangyy DjangoBlog <= 2.1.0.0 Missing Authentication |
|---|
| Описание | DjangoBlog through x.x.x.x allows unauthenticated GPS data injection via the /owntracks/logtracks endpoint. The endpoint in owntracks/views.py accepts arbitrary POST requests with JSON GPS data without any authentication or CSRF protection, allowing attackers to inject forged location data into the database or exhaust database storage via mass injection. |
|---|
| Источник | ⚠️ https://github.com/3em0/cve_repo/blob/main/DjangoBlog/Vuln-2-Unauthenticated-GPS-Data-Injection.md |
|---|
| Пользователь | Dem0 (UID 82596) |
|---|
| Представление | 26.03.2026 17:03 (6 месяцы назад) |
|---|
| Модерация | 19.04.2026 07:11 (24 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 358212 [liangliangyy DjangoBlog до 2.1.0.0 logtracks Endpoint owntracks/views.py слабая аутентификация] |
|---|
| Баллы | 18 |
|---|