What is GHSA-22cc-w7xm-rfhx?

GHSA-22cc-w7xm-rfhx is a security advisory published by GitHub Security Advisories with Medium severity. Mezzanine allows attackers to bypass access controls via manipulating the Host header

Which CVE IDs does GHSA-22cc-w7xm-rfhx cover?

GHSA-22cc-w7xm-rfhx covers the following CVE IDs: CVE-2024-25170. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-22cc-w7xm-rfhx?

GHSA-22cc-w7xm-rfhx affects 1 product, including: pip/Mezzanine:\u003c= 6.0.0.

GHSA-22cc-w7xm-rfhxMedium

Mezzanine allows attackers to bypass access controls via manipulating the Host header

Vendor

GitHub Security Advisories

Published

February 28, 2024

Last Modified

March 8, 2024

🔗 CVE IDs covered (1)

CVE-2024-25170 →

📋 Description

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.

🎯 Affected products1

pip/Mezzanine:<= 6.0.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-25170
https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0
https://ibb.co/DpxHpz9
https://ibb.co/T0fhLwR
https://github.com/advisories/GHSA-22cc-w7xm-rfhx