CVE-2020-8984

CVE-2020-8984 affects ZendTo’s lib/NSSDropbox.php, prior to version 5.22-2 Beta. The vulnerability enables IP address spoofing via the X-Forwarded-For header. The connected documents confirm the affected component and root cause (IP spoofing) but do not provide exploit details or explicit remedia...