CVE-2019-1020006: Invenio-App vulnerable to host header injection attack

July 16, 2019 (updated September 23, 2024)

invenio-app allows host header injection.

References

github.com/advisories/GHSA-94mf-xfg5-r247
github.com/inveniosoftware/invenio-app
github.com/inveniosoftware/invenio-app/security/advisories/GHSA-94mf-xfg5-r247
github.com/pypa/advisory-database/tree/main/vulns/invenio-app/PYSEC-2019-24.yaml
nvd.nist.gov/vuln/detail/CVE-2019-1020006

Detect and mitigate CVE-2019-1020006 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →