Mezzanine allows attackers to bypass access controls via manipulating the Host header

GHSA ID

GHSA-22cc-w7xm-rfhx

CVE ID

CVE-2024-25170

Severity

medium

Published

2024-02-28T21:30:20Z

Updated

2024-03-08T05:09:22Z

Description

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-25170 ↗
• https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0 ↗
• https://ibb.co/DpxHpz9 ↗
• https://ibb.co/T0fhLwR ↗
• https://github.com/advisories/GHSA-22cc-w7xm-rfhx ↗