Timeline

• Feb 11, 2021 CVE Published
• Feb 11, 2021 PoC Published

References

• HostAuthorization middleware does not suitably sanitize the Host / X-Forwarded-For header allowing redirection. advisory