~ / search / GHSA-22cc-w7xm-rfhx

GHSA-22cc-w7xm-rfhx

Mezzanine allows attackers to bypass access controls via manipulating the Host header

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-25170

Packages

EcosystemPackageAffectedFixed in
PyPI Mezzanine <= 6.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.

References

External links from the advisory. They lead to third-party sites.