CVE-2011-4139

Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to…

published October 19, 2011

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02323 · 83.2th percentile
Published
2011-10-19T10:00Z
EPSS history
Timeline
  • 19 OCT 10:00Z
    Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to…
    cvelistv5