NVD

Id
45899  
Name
CVE-2012-4520  
Description
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-18  
Modified Date
2013-05-03  
Seq
2012-4520  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230479 45899 CVE-2012-4520 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691145  View
230480 45899 CVE-2012-4520 FEDORA-2012-16406  View
230481 45899 CVE-2012-4520 FEDORA-2012-16417  View
230482 45899 CVE-2012-4520 FEDORA-2012-16440  View
230483 45899 CVE-2012-4520 1027708  View
230484 45899 CVE-2012-4520 USN-1632-1  View
230485 45899 CVE-2012-4520 USN-1757-1  View
230486 45899 CVE-2012-4520 DSA-2634  View
230487 45899 CVE-2012-4520 [oss-security] 20121029 Re: CVE Request: Django  View
230488 45899 CVE-2012-4520 https://bugzilla.redhat.com/show_bug.cgi?id=865164  View
230489 45899 CVE-2012-4520 https://github.com/django/django/commit/92d3430f12171f16f566c9050c40feefb830a4a3  View
230490 45899 CVE-2012-4520 https://github.com/django/django/commit/9305c0e12d43c4df999c3301a1f0c742264a657e  View
230491 45899 CVE-2012-4520 https://github.com/django/django/commit/b45c377f8f488955e0c7069cad3f3dd21910b071  View
230492 45899 CVE-2012-4520 https://www.djangoproject.com/weblog/2012/oct/17/security/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29721 JVNDB-2012-005428 Django における任意の URL が表示される脆弱性 Django の django.http.HttpRequest.get_host 関数には、任意の URL が生成されて、表示される脆弱性が存在します。 CVE-2012-4520 57758 CVE-2012-4520 45899 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005428.html 2012-10-17 2012-11-30 View