Описание
An issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather than the source address in an IP packet header, for obtaining IP address information was mishandled.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.12.0 (исключая)
cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00206
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-444
Связанные уязвимости
CVSS3: 5.3
debian
больше 5 лет назад
An issue was discovered in Mattermost Server before 5.12.0. Use of a P ...
github
больше 3 лет назад
An issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather than the source address in an IP packet header, for obtaining IP address information was mishandled.
EPSS
Процентиль: 43%
0.00206
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-444