← voltar
CVE-2016-9014

CVE-2016-9014

EPSS 6.1%
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S/https://www.djangoproject.com/weblog/2016/nov/01/security-releases/http://www.debian.org/security/2017/dsa-3835http://www.securityfocus.com/bid/94068http://www.securitytracker.com/id/1037159http://www.ubuntu.com/usn/USN-3115-1