1 matches found
MGASA-2022-0289 Updated apache-mod_wsgi packages fix security vulnerability
It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations CVE-2022-2255...
7.5CVSS7.5AI score0.0088EPSS
SaveExploits1References3
20