Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h7rq-f9gq-mc8r

Опубликовано: 13 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 6.5

Описание

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 29%
0.00367
Низкий

6.9 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 6.5
ubuntu
3 месяца назад

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 6.5
redhat
3 месяца назад

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 6.5
nvd
3 месяца назад

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 6.5
msrc
3 месяца назад

NGINX ngx_quic_module vulnerability

CVSS3: 6.5
debian
3 месяца назад

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 ...

EPSS

Процентиль: 29%
0.00367
Низкий

6.9 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-290