DemoBook a demo

Vulnerability advisory

PYSEC-2012-7

Published Updated OSV record ↗

Also known as CVE-2012-4520GHSA-2655-q453-22f9

Severity

Severity not reported.

Affected versions

django PyPI

All django advisories →
AffectedFixed
GIT github.com/django/django ↗
All commits before 9305c0e12d43c4df999c3301a1f0c742264a657eCommit 9305c0e12d43c4df999c3301a1f0c742264a657e
Not specifiedCommit b45c377f8f488955e0c7069cad3f3dd21910b071
Not specifiedCommit 92d3430f12171f16f566c9050c40feefb830a4a3
1.3 to before 1.3.41.3.4Advisories →
1.4 to before 1.4.21.4.2Advisories →
Also listed as affected (10)

Description

The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.