13 matches found
nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module
A flaw was found in NGINX Plus and NGINX Open Source when configured to use the HTTP/3 QUIC module. A remote attacker could exploit this by spoofing their source IP address. This vulnerability allows for the bypass of authorization controls or rate limiting mechanisms, potentially leading to...
6.9CVSS6.6AI score0.00367EPSS
SaveExploits0References5
20