← All advisories

Critical severity9.1NVD Advisory· Published Feb 28, 2024· Updated Jun 17, 2026

CVE-2024-25170

CVE-2024-25170

Description

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
MezzaninePyPI	<= 6.0.0	—

Affected products

3

Jupo/Mezzanine
cpe:2.3:a:jupo:mezzanine:6.0.0:*:*:*:*:*:*:*
ghsa-coords
pkg:pypi/mezzanine
Range: <= 6.0.0
Mezzanine/Mezzanine CMScpe-rescue

Patches

Vulnerability mechanics

References

4

ibb.co/DpxHpz9nvdExploitWEB
ibb.co/T0fhLwRnvdExploitWEB
github.com/advisories/GHSA-22cc-w7xm-rfhxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-25170ghsaADVISORY

News mentions

0

No linked articles in our index yet.