| Revision Date: | 2015-11-16 | Version: | 1 | | Title: | CVE-2012-4520 | | Description: |
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.
| | Family: | unix | Class: | vulnerability | | Status: | | Reference(s): | CVE-2012-4520
| | Platform(s): | openSUSE 12.2 Update
openSUSE 12.3 Update
| Product(s): | | | Definition Synopsis | | python-django-1.4.5-2.4.1 is installed |
|