Files
CVEs-PoC/2016/CVE-2016-1000110.md
2024-07-25 21:25:12 +00:00

2.4 KiB

CVE-2016-1000110

Description

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

POC

Reference

Github