critical9.1
CVE-2024-25170
Mezzanine allows attackers to bypass access controls via manipulating the Host header
Impact
An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | Mezzanine | <= 6.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jupo | Mezzanine | Version 6.0.0 |