Описание
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 2.7.12-3build1 |
| devel | DNE | |
| disco | not-affected | 2.7.12-3build1 |
| eoan | not-affected | 2.7.12-3build1 |
| esm-apps/focal | not-affected | 2.7.12-3build1 |
| esm-apps/jammy | not-affected | 2.7.12-3build1 |
| esm-infra-legacy/trusty | not-affected | 2.7.6-8ubuntu0.3 |
| esm-infra/bionic | not-affected | 2.7.12-3build1 |
| esm-infra/xenial | not-affected | 2.7.12-1ubuntu0~16.04.1 |
| focal | not-affected | 2.7.12-3build1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE | |
| impish | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-infra-legacy/trusty | not-affected | 3.4.3-1ubuntu1~14.04.5 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE | |
| impish | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-infra-legacy/trusty | not-affected | 3.5.2-2ubuntu0~16.04.4~14.04.1 |
| esm-infra/focal | DNE | |
| esm-infra/xenial | not-affected | 3.5.2-2ubuntu0~16.04.1 |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE |
Показывать по
5.8 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
The CGIHandler class in Python before 2.7.12 does not protect against ...
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
5.8 Medium
CVSS2
6.1 Medium
CVSS3