Lucene search
RootSSV:60442HistoryOct 23, 2012 - 12:00 a.m.
Django 1.3.1 'HttpRequest.get_host()'信息泄露漏洞
2012-10-2300:00:00
Root
www.seebug.org
26
0.007 Low
EPSS
Percentile
77.5%
Bugtraq ID:56146
CVE ID:CVE-2012-4520
Django是一款开放源代码的Web应用框架，由Python写成。
当处理HTTP "Host"头数据时"HttpRequest.get_host()"方法存在漏洞，可被利用构建特制的头字段泄露任意URLS。
0
Django 1.3.1
厂商解决方案
Django 1.3.4或1.4.2已经修复此漏洞，建议用户下载使用：
https://www.djangoproject.com/weblog/2012/oct/17/security/
Related
openvas
openvas
FreeBSD Ports: django
2012-10-29 00:00:00
FreeBSD Ports: django
2012-10-29 00:00:00
Ubuntu Update for python-django USN-1632-1
2012-11-19 00:00:00
nessus
nessus
Fedora 18 : python-django-1.4.2-1.fc18 (2012-16406)
2012-10-24 00:00:00
Fedora 16 : Django-1.3.4-1.fc16 (2012-16417)
2012-10-30 00:00:00
prion
prion
Default credentials
2012-11-18 23:55:00
gitlab
gitlab
Improper Input Validation
2022-05-17 00:00:00
securityvulns
securityvulns
[USN-1632-1] Django vulnerability
2012-11-18 00:00:00
[SECURITY] [DSA 2634-1] python-django security update
2013-03-03 00:00:00
cve
cve
CVE-2012-4520
2012-11-18 23:55:00
github
github
Django Allows Arbitrary URL Generation
2022-05-17 05:10:31
osv
osv
PYSEC-2012-7
2012-11-18 23:55:00
Django Allows Arbitrary URL Generation
2022-05-17 05:10:31
python-django - several vulnerabilities
2013-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: python-django-1.4.2-1.fc18
2012-10-23 08:48:21
[SECURITY] Fedora 17 Update: Django-1.4.2-1.fc17
2012-10-31 02:58:14
[SECURITY] Fedora 16 Update: Django-1.3.4-1.fc16
2012-10-30 03:45:58
freebsd
freebsd
django -- multiple vulnerabilities
2012-10-17 00:00:00
ubuntucve
ubuntucve
CVE-2012-4520
2012-10-30 00:00:00
ubuntu
ubuntu
Django vulnerability
2012-11-15 00:00:00
Django vulnerabilities
2013-03-07 00:00:00
debiancve
debiancve
CVE-2012-4520
2012-11-18 23:55:00
debian
debian
[SECURITY] [DSA 2634-1] python-django security update
2013-02-26 23:58:40