Lucene search
GoogleOSV:PYSEC-2019-178HistoryAug 22, 2019 - 5:15 p.m.
PYSEC-2019-178
2019-08-2217:15:00
Google
osv.dev
8
0.001 Low
EPSS
Percentile
51.0%
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing.
Related
veracode
veracode
Arbitrary Proxy Redirection
2019-08-23 01:19:31
github
github
Elastic APM agent for Python client CGI proxy redirection flaw
2022-05-24 16:54:36
prion
prion
Design/Logic Flaw
2019-08-22 17:15:00
cve
cve
CVE-2019-7617
2019-08-22 17:15:10
osv
osv
Elastic APM agent for Python client CGI proxy redirection flaw
2022-05-24 16:54:36
CVE-2019-7617
2019-08-22 17:15:10
cvelist
cvelist
CVE-2019-7617
2019-08-22 16:12:10
nvd
nvd
CVE-2019-7617
2019-08-22 17:15:10
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40