Lucene search

K
osvGoogleOSV:GO-2020-0029
HistoryApr 14, 2021 - 8:04 p.m.

GO-2020-0029

2021-04-1420:04:52
Google
osv.dev
8

0.002 Low

EPSS

Percentile

59.1%

Due to improper HTTP header santization, a malicious user can spoof their
source IP address by setting the X-Forwarded-For header. This may allow
a user to bypass IP based restrictions, or obfuscate their true source.

0.002 Low

EPSS

Percentile

59.1%