CVE-2023-37265

🗓️ 17 Jul 2023 21:15:09Reported by [email protected]Type

CasaOS 0.4.4 Patch for Arbitrary Command Executio

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2023-37265	18 Jul 202300:45	–	circl
CNNVD	CasaOS 访问控制错误漏洞	17 Jul 202300:00	–	cnnvd
CNVD	IBM DB2 is a relational database management system from International Business Machines (IBM). The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a denial of service.	19 Jul 202300:00	–	cnvd
CVE	CVE-2023-37265	17 Jul 202320:59	–	cve
Cvelist	CVE-2023-37265 Incorrect identification of source IP addresses in CasaOS	17 Jul 202320:59	–	cvelist
Github Security Blog	CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202314:36	–	github
GitLab Advisory Database	CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202300:00	–	gitlab
Nuclei	CasaOS < 0.4.4 - Authentication Bypass via Internal IP	14 Jun 202603:03	–	nuclei
OSV	CVE-2023-37265 Incorrect identification of source IP addresses in CasaOS	17 Jul 202320:59	–	osv
OSV	GHSA-VJH7-5R6X-XH6G CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202314:36	–	osv

NVD

Node

icewhale casaosMatch0.4.4alpha1

icewhale casaosMatch0.4.4alpha2

icewhale casaosMatch0.4.4alpha3

icewhale casaosMatch0.4.4alpha4

icewhale casaosMatch0.4.4alpha5

Node

Source	Link
github	www.github.com/IceWhaleTech/CasaOS-Gateway/security/advisories/GHSA-vjh7-5r6x-xh6g
sonarsource	www.sonarsource.com/blog/security-vulnerabilities-in-casaos
github	www.github.com/IceWhaleTech/CasaOS-Gateway/commit/391dd7f0f239020c46bf057cfa25f82031fc15f7

07 Apr 2025 13:54Current

CVSS 3.19.8

EPSS0.91121