Description
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
Remediation
References
Related Vulnerabilities
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3742)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2101)
Lodash CVE-2018-16487 Vulnerability (CVE-2018-16487)
MySQL CVE-2020-14597 Vulnerability (CVE-2020-14597)
Oracle Database Server CVE-2010-0902 Vulnerability (CVE-2010-0902)