CVE:CVE-2020-4071
CNNVD:CNNVD-202006-1671
django-basic-auth-ip-whitelist是一款支持Django框架设置基本身份验证和IP白名单的软件包。
django-basic-auth-ip-whitelist 0.3.4之前版本中存在安全漏洞。攻击者可利用该漏洞获取有效凭证。
solution:Upgrade django-basic-auth-ip-whitelist_project django-basic-auth-ip-whitelist to a higher version than 0.3.4,and avoid the version (,0.3.4)