ID:5818 - Exploit for Input validation error in Django - CVE-2019-19844

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to hijack another user account.

The vulnerability exists due to insufficient validation of user-supplied input when processing email addresses passed via the password reset form. A remote attacker with knowledge of a valid email address can use a specially crafted email that after Unicode transformation will be treated as the victim's email address and reset password for the victim's account to the attacker provided email address.

Remediation