Lucene search
K

Host Header Injection

🗓️ 30 Jul 2019 08:12:04Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 14 Views

invenio-app vulnerable to host header injection due to reliance on `APP_ALLOWED_HOSTS` misconfiguring web serve

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CVE
CVE-2019-1020006
29 Jul 201914:10
cve
Cvelist
CVE-2019-1020006
29 Jul 201914:10
cvelist
EUVD
EUVD-2019-0061
7 Oct 202500:30
euvd
Github Security Blog
Invenio-App vulnerable to host header injection attack
16 Jul 201900:52
github
NVD
CVE-2019-1020006
29 Jul 201915:15
nvd
OSV
GHSA-94MF-XFG5-R247 Invenio-App vulnerable to host header injection attack
16 Jul 201900:52
osv
OSV
PYSEC-2019-24
29 Jul 201915:15
osv
Prion
Design/Logic Flaw
29 Jul 201915:15
prion
PyPA
PYSEC-2019-24
29 Jul 201915:15
pypa
RedhatCVE
CVE-2019-1020006
22 May 202508:19
redhatcve
Rows per page
Vulners
Node
invenio_appinvenio_appRange1.0.0a21.0.5python
OR
invenio_appinvenio_appMatch1.1.0python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Jul 2019 08:39Current
3.2Low risk
Vulners AI Score3.2
CVSS 25.8
CVSS 36.1
EPSS0.00226
14