Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hqm6-p3v5-x59r

Опубликовано: 19 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share codes.

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share codes.

EPSS

Процентиль: 31%
0.0012
Низкий

7.5 High

CVSS3

Дефекты

CWE-305

Связанные уязвимости

CVSS3: 7.5
nvd
3 месяца назад

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share codes.

EPSS

Процентиль: 31%
0.0012
Низкий

7.5 High

CVSS3

Дефекты

CWE-305