cve/2016/CVE-2016-1000110.md
2024-05-26 14:27:05 +02:00

2.4 KiB

CVE-2016-1000110

Description

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

POC

Reference

Github