---
id: 1952
title: "Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applications"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/identifying-and-remediating-cwe-328-reversible-one-way-hash-django-applications"
published_at: "2024-01-24T07:55:22Z"
tags: ["web-security", "python", "django", "cwe-328", "hashing", "password-storage"]
phying_url: "https://phying.com/item/1952"
lang: en
---

# Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applications

## Summary

Weak algorithms like MD5, improper salting, and homemade hash functions make Django password hashing reversible, violating CWE-328. Learn to spot the flaws and move to stronger, salted schemes.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-01-24T07:55:22Z
- **Original:** https://www.hackerone.com/blog/identifying-and-remediating-cwe-328-reversible-one-way-hash-django-applications
- **Phying News:** https://phying.com/item/1952