WSGI header spoofing Affecting waitress package, versions [,1.0a1)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-WAITRESS-40552
- published 14 Jan 2015
- disclosed 14 Jan 2015
- credit Matt Russell
Overview
waitress is a Waitress WSGI server.
Affected versions of this package are vulnerable to WSGI header spoofing. A malicious user could exploit this vulnerability by using an _ character instead of a - in an HTTP header. In the WSGI environ, the X-Auth-User and the X-Auth_User headers are both converted to HTTP_X_Auth_User, allowing the attacker to bypass the protection. This vulnerability is related to CVE-2015-0219
References
CVSS Scores
version 3.1