CVE-2016-6286

CVE-2016-6286 describes a vulnerability in the "spiffy-cgi-handlers" egg (versions prior to 0.5) where a nonexistent "Proxy" header could be converted into the HTTP_PROXY environment variable, enabling attackers to redirect CGI programs to an attacker-controlled HTTP proxy server. This high-severity vulnerability (CVSS 7.5) has a low attack complexity and could lead to significant integrity impacts, as attackers could intercept or manipulate traffic. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.