PT-2020-20407

Name of the Vulnerable Software and Affected Versions ZendTo versions prior to 5.22-2 Beta Description The issue allows IP address spoofing via the X-Forwarded-For header. This is due to a problem in the lib/NSSDropbox.php file. Recommendations For versions prior to 5.22-2 Beta, update to version...