This issue was addressed by not setting the HTTP_PROXY environment variable from CGI.ĬVE-2016-4694: Dominic Scheirlinck and Scott Geary of VendĪvailable for: OS X Lion v10.7.5 and later Impact: A remote attacker may be able to proxy traffic through an arbitrary serverĭescription: An issue existed in the handling of the HTTP_PROXY environment variable.
Available for: OS X Lion v10.7.5 and later
