Lucene search

K
osvGoogleOSV:PSF-2019-2
HistoryNov 27, 2019 - 4:54 p.m.

HTTPoxy attack

2019-11-2716:54:34
Google
osv.dev
12

6.1 Medium

AI Score

Confidence

High

0.289 Low

EPSS

Percentile

96.9%

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.