Lucene search
Redhat.comRH:CVE-2019-12781HistoryApr 07, 2020 - 11:36 a.m.
CVE-2019-12781
2020-04-0711:36:06
redhat.com
access.redhat.com
9
0.01 Low
EPSS
Percentile
83.5%
An HTTP detection flaw was discovered in Django. If deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme() incorrectly detected client requests made using HTTP as using HTTPS. This resulted in incorrect results for is_secure() and build_absolute_uri(), and HTTP requests were not correctly redirected to HTTPS in accordance with SECURE_SSL_REDIRECT.
Related
osv
osv
CVE-2019-12781
2019-07-01 14:15:10
python-django - security update
2019-07-01 00:00:00
Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
2019-07-03 20:37:25
archlinux
archlinux
[ASA-201907-2] python-django: silent downgrade
2019-07-06 00:00:00
[ASA-201907-3] python2-django: silent downgrade
2019-07-06 00:00:00
prion
prion
Design/Logic Flaw
2019-07-01 14:15:00
freebsd
freebsd
Django -- Incorrect HTTP detection with reverse-proxy connecting via HTTPS
2019-07-01 00:00:00
debiancve
debiancve
CVE-2019-12781
2019-07-01 14:15:10
nvd
nvd
CVE-2019-12781
2019-07-01 14:15:10
cve
cve
CVE-2019-12781
2019-07-01 14:15:10
veracode
veracode
Man-in-the-Middle (MitM)
2019-07-02 04:49:58
alpinelinux
alpinelinux
CVE-2019-12781
2019-07-01 14:15:10
github
github
Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
2019-07-03 20:37:25
nessus
nessus
ubuntucve
ubuntucve
CVE-2019-12781
2019-07-01 00:00:00
openvas
openvas
cvelist
cvelist
CVE-2019-12781
2019-07-01 13:56:37
ubuntu
ubuntu
Django vulnerabilities
2019-07-01 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: python-django-2.1.10-1.fc30
2019-07-13 01:07:30
[SECURITY] Fedora 30 Update: python-django-2.1.11-1.fc30
2019-08-15 18:10:42
[SECURITY] Fedora 31 Update: python-django-2.2.13-1.fc31
2020-06-19 01:07:50
debian
debian
[SECURITY] [DSA 4476-1] python-django security update
2019-07-05 18:03:12
redhat
redhat
(RHSA-2020:1324) Moderate: python-django security update
2020-04-06 08:39:12
(RHSA-2020:4390) Moderate: python-django security update
2020-10-28 17:42:01
(RHSA-2020:4366) Important: Satellite 6.8 release
2020-10-27 12:45:25
suse
suse
Security update for python-Django (moderate)
2019-08-14 00:00:00
Security update for python-Django (moderate)
2019-08-08 00:00:00
altlinux
altlinux