Looking for the vulnerability index of Invicti's legacy products?
Django weak secret key - Vulnerability Database

Django weak secret key

Description

Django web application can store a user's session in a cookie. For protection against cookie data tampering, Django signs the session cookie value with a secret key. It's very important that an attacker doesn't know the value of this secret key. Your application is using a weak/known secret key and Invicti managed to guess this key.

Remediation

Change the value of SECRET_KEY to a long random string.

Related Vulnerabilities