The Vulnerability History Project
Vulnerabilities
Insights
Curate
Tags
All
Projects
CWEs
Languages
Lessons
Severities
Subsystems
More
News
Projects We Study
How to Contribute
By the Numbers
About Us
Toggle Theme
Warning: Our website does not support Internet Explorer, please use Edge instead.
[1.10.x] Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True.
This is a security fix.
by
Lindsey the Elephant Seal 2016-10-17 16:14:49 UTC
commit 884e113838e5a72b4b0ec9e5e87aa480f6aa4472
Django
Fix
CVE-2016-9014
django/http/request.py
+4
-5
docs/ref/settings.txt
+3
-8
docs/releases/1.10.3.txt
-22
docs/releases/1.8.16.txt
-22
docs/releases/1.9.11.txt
-22
tests/csrf_tests/tests.py
+1
-1
tests/requests/tests.py
+14
-15
expand_less