Homepage
About Snyk

django-registration@2.5 vulnerabilities

An extensible user-registration application for Django.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the django-registration package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Information Exposure

Affected versions of this package are vulnerable to Information Exposure django-registration did not apply Django's :func:django.views.decorators.debug.sensitive_post_parametersdecorator to the basedjango_registration.views.RegistrationView`.

As such, if detailed error reports, such as `Django's error reports emailed to site staff were enabled, and a server-side error occurred during account registration, the generated error report would include all fields submitted in the HTTP request, some of which are potentially sensitive depending on the user-account model and registration workflow in use.

How to fix Information Exposure?

Upgrade django-registration to version 3.1.2 or higher.

[,3.1.2)
Go back to all versions of this package