Unsafe methods in the Request class
launchpad.net/bugs/cve/CVE-2015-2309
nvd.nist.gov/vuln/detail/CVE-2015-2309
security-tracker.debian.org/tracker/CVE-2015-2309
www.cve.org/CVERecord?id=CVE-2015-2309