CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker…

published November 27, 2019

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04526 · 91.5th percentile
Published
2019-11-27T16:54Z
EPSS history
Timeline
  • 27 NOV 16:54Z
    The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker…
    cvelistv5