Lucene search
PRIOn knowledge basePRION:CVE-2023-50463HistoryDec 10, 2023 - 11:15 p.m.
Design/Logic Flaw
2023-12-1023:15:00
PRIOn knowledge base
www.prio-n.com
6
caddy-geo-ip
caddy 2
ip address spoofing
x-forwarded-for
trust_header
protection mechanism
The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism (trusted_proxy directive in reverse_proxy or IP address range restrictions).
Related
nvd
nvd
CVE-2023-50463
2023-12-10 23:15:07
ubuntucve
ubuntucve
CVE-2023-50463
2023-12-10 00:00:00
veracode
veracode
IP Spoofing
2023-12-11 08:25:29
osv
osv
Header spoofing in caddy-geo-ip
2023-12-11 00:30:32
Spoofed source IP address in github.com/shift72/caddy-geo-ip
2024-01-02 18:32:43
CVE-2023-50463
2023-12-10 23:15:07
cve
cve
CVE-2023-50463
2023-12-10 23:15:07
cvelist
cvelist
CVE-2023-50463
2023-12-10 00:00:00
github
github
Header spoofing in caddy-geo-ip
2023-12-11 00:30:32