Lucene search

K
osvGoogleOSV:CVE-2016-9014
HistoryDec 09, 2016 - 8:59 p.m.

CVE-2016-9014

2016-12-0920:59:00
Google
osv.dev
3

Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.