Http Client
Approved changes feed: RSS · Atom
cpe:2.3:a:call-cc:http-client:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Call Cc (8c136bf2-ecfb-5a70-a82e-46dbe6d75ef8) |
|---|---|
| Product | Http Client (a0dcb35c-24c5-54f7-99e3-340320a3e123) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-6287 |
vulnerable | 2026-06-08 05:07:59.347917 |
Details available
The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied "Proxy" header could allow an attacker to direct all HTTP requests through a proxy (also known as a "httpoxy" attack). This affects all versions of http-client before 0.10.
Published: 2017-01-10T15:00:00.000Z
Updated: 2024-08-06T01:22:20.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6286 |
vulnerable | 2026-06-08 05:07:59.347474 |
Details available
The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server (also known as a "httpoxy" attack). This affects all versions of spiffy-cgi-handlers before 0.5.
Published: 2017-01-10T15:00:00.000Z
Updated: 2024-08-06T01:22:20.811Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.