AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-1000107

MEDIUM · CVSS 6.1 EPSS 1.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2016-1000107
Severity
MEDIUM
CVSS
6.1
EPSS
1.43%

Original NVD Description

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.