← Back

Django Ses Project

django-ses_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Django Ses
django-ses
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-33185
1Django Ses Project
1Django Ses
Nov 21, 2024
May 26, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed...Show more
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests are signed by AWS and are verified by django_ses, however the verification of this signature was found to be flawed as it allowed users to specify arbitrary public certificates. This issue was patched in version 3.5.0.Show less