CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

976 matches found

Snyk•added 2025/10/06 3:45 p.m.•3 views

Reliance on Untrusted Inputs in a Security Decision

Overview litestar is a Litestar - A production-ready, highly performant, extensible ASGI API Framework Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision due to the use of X-Forwarded-For header in the cachekeyfromrequest function. An attacker...

7.5CVSS6.9AI score0.00452EPSS

SaveExploits0References2

Cvelist•added 2025/10/06 3:23 p.m.•13 views

CVE-2025-59152 X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting

Litestar is an Asynchronous Server Gateway Interface ASGI framework. In version 2.17.0, rate limits can be completely bypassed by manipulating the X-Forwarded-For header. This renders IP-based rate limiting ineffective against determined attackers. Litestar's RateLimitMiddleware uses...

7.5CVSS0.00452EPSS

SaveExploits0References3

CVE•added 2025/10/06 3:23 p.m.•31 views

CVE-2025-59152

Litestar vulnerability in RateLimitMiddleware: when X-Forwarded-For is present, cache_key_from_request() trusts it unconditionally, enabling per-header-bucket rate-limiting and bypass of IP-based quotas. Affected: Litestar 2.17.0 with default RateLimitMiddleware configuration. Mitigation: upgrade...

7.5CVSS6.6AI score0.00452EPSS

SaveExploits0References3

OSV•added 2025/10/06 3:23 p.m.•10 views

CVE-2025-59152 X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting

7.5CVSS6.7AI score0.00452EPSS

SaveExploits0References5

CNNVD•added 2025/10/06 12:0 a.m.•8 views

Litestar 安全漏洞

Litestar is a powerful, flexible but stubborn ASGI framework open-sourced by Litestar. A security vulnerability exists in Litestar version 2.17.0 that stems from unconditional trust in the X-Forwarded-For header, which could lead to bypassing rate limiting...

7.5CVSS6.4AI score0.00452EPSS

SaveExploits0References3