CVE-2023-44463

2023-10-0200:00:00

mitre

www.cve.org

pretix

vulnerability

x-forwarded-for

parsing

ip address spoofing

configuration files

EPSS

0.001

Percentile

28.8%

JSON

An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application.