Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2h9q-c8x4-7278

Опубликовано: 19 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specifying an arbitrary IP as value of X-Forwarded-For or Client-Ip headers while performing HTTP requests.

Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specifying an arbitrary IP as value of X-Forwarded-For or Client-Ip headers while performing HTTP requests.

EPSS

Процентиль: 72%
0.00717
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specifying an arbitrary IP as value of X-Forwarded-For or Client-Ip headers while performing HTTP requests.

EPSS

Процентиль: 72%
0.00717
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-290