Lucene search

K
cvelistMitreCVELIST:CVE-2009-3287
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2009-3287

2022-10-0316:23:56
mitre
www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.6%

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header.

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.6%

Related for CVELIST:CVE-2009-3287