He found a vulnerability in GeoNode's proxy view: https://github.com/GeoNode/geonode/issues/1308