CVE-2020-29069

Publication date

2020-11-24 23:32:29

Family

mitre

State

PUBLISHED

Description

_get_flag_ip_localdb in server/mhn/ui/utils.py in Modern Honey Network (MHN) through 2020-11-23 allows attackers to cause a denial-of-service via an IP address that is absent from a local geolocation database, because the code tries to uppercase a return value even if that value is not a string.