GitHub Advisoryadvisory · PyPI

GHSA-22cc-w7xm-rfhx Mezzanine allows attackers to bypass access controls via manipulating the Host header

MEDIUM Published 2024-02-28 Modified 2024-02-28 Official page ↗

Aliases: CVE-2024-25170
Ecosystem: PyPI
Packages: Mezzanine
Severity: Moderate
Reviewed: 2024-02-28

Affected packages

• PyPI Mezzanine: <= 6.0.0 (no fix yet)

Description

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.

Related

Alias · CVE (1)

CVE-2024-25170 An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header. vulnerability

References