Lucene search
+L

5 matches found

OSV
OSV
•added 2026/07/17 7:42 p.m.•23 views

GO-2026-5982 TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services in github.com/almeidapaulopt/tsdproxy

TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services in github.com/almeidapaulopt/tsdproxy...

5.3AI score
SaveExploits0References2
OSV
OSV
•added 2026/07/17 7:42 p.m.•22 views

GO-2026-5969 TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation in github.com/almeidapaulopt/tsdproxy

TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation in github.com/almeidapaulopt/tsdproxy...

5.3AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/07/10 9:43 p.m.•24 views

TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation

Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication token to all proxied backend services. When identityHeaders is enabled the default, tsdproxy injects x-tsdproxy-auth-token into every upstream HTTP request alongside user identity...

6.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/07/10 9:43 p.m.•28 views

GHSA-G936-7JQJ-MWV8 TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation

Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication token to all proxied backend services. When identityHeaders is enabled the default, tsdproxy injects x-tsdproxy-auth-token into every upstream HTTP request alongside user identity...

9CVSS6.4AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•7 views

PT-2026-61813

Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication token to all proxied backend services. When identityHeaders is enabled the default, tsdproxy injects x-tsdproxy-auth-token into every upstream HTTP request alongside user identity...

9CVSS6.4AI score
SaveExploits0References3
Rows per page
Query Builder