Threats tagged 'ghsa-q2gf-mw7m-x2mr'

A vulnerability in PHPGurukul News Portal 1.0 involves the use of a hard-coded cryptographic key in the file /onps/settings.py. This flaw allows remote attackers to manipulate the SECRET_KEY argument. Exploitation is difficult and requires a high level of complexity. The vulnerability has been publicly disclosed and may be exploited.