PT-2026-137224

Name of the Vulnerable Software and Affected Versions ezBookkeeping versions 0.10.0 through 1.5.9 Description The application constructs its Gin router using gin.New without configuring SetTrustedProxies, which leads c.ClientIP to trust spoofed X-Forwarded-For values. An unauthenticated remote...