VDB

GCVE-110-MAGEIA-2015-251

GCVE-110-MAGEIA-2015-251
Advisory Published
Vulnetix · Advisory published July 1, 2015
Security fixes (CVE-2014-9720) The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrf_cookies and gzip options (or have gzip applied by a proxy).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiapython-tornado3.1-4.1.mga4 (unaffected), 0 (affected)—

Aliases

CVE-2014-9720

References

Updated python-tornado package fixes security vulnerability
advisory
Updated python-tornado package fixes security vulnerability
issue
Updated python-tornado package fixes security vulnerability
issue
Updated python-tornado package fixes security vulnerability
issue

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›