Debian/python2.7: medium 6.1
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
Action: Upgrade python2.7 to 2.7.12-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.12-2 | - |
Fixed versions
| 2.7.12-2 |
Sources
published · modified · JSON