Description
Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.
References (8)
Core 8
Core References
Various Sources vendor-advisory
x_refsource_suse
https://hermes.opensuse.org/messages/14700881
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2011/dsa-2332
Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=737366
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/46614
Patch mailing-list
x_refsource_mlist
http://openwall.com/lists/oss-security/2011/09/11/1
Patch x_refsource_confirm
https://www.djangoproject.com/weblog/2011/sep/10/127/
Patch mailing-list
x_refsource_mlist
http://openwall.com/lists/oss-security/2011/09/13/2
Patch, Vendor Advisory x_refsource_confirm
https://www.djangoproject.com/weblog/2011/sep/09/
Scores
EPSS
0.0230
EPSS Percentile
81.3%
Details
CWE
CWE-20
Status
published
Products (20)
djangoproject/django
0.91
djangoproject/django
0.95
djangoproject/django
0.95.1
djangoproject/django
0.96
djangoproject/django
1.0
djangoproject/django
1.0.1
djangoproject/django
1.0.2
djangoproject/django
1.1
djangoproject/django
1.1.0
djangoproject/django
1.1.2
... and 10 more
Published
Oct 19, 2011
Tracked Since
Feb 18, 2026