3 matches found
CVE-2022-2366 Incorrect defaults can cause attackers to bypass rate limitations
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...
5.6CVSS5.8AI score0.00595EPSS
SaveExploits0References1
CVE-2022-2366 Incorrect defaults can cause attackers to bypass rate limitations
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...
5.6CVSS5.6AI score0.00595EPSS
SaveExploits0References1
20