Improper Rate Limiting Protection

Fleet is vulnerable to Improper Rate Limiting Protection. The vulnerability is due to trusting client-supplied IP headers without validating their origin, which allows an attacker to spoof IP addresses and bypass rate-limiting controls to perform brute-force or credential-stuffing attacks...