Lucene search
Ubuntu.comUB:CVE-2023-50463HistoryDec 10, 2023 - 12:00 a.m.
CVE-2023-50463
2023-12-1000:00:00
ubuntu.com
ubuntu.com
12
cve-2023-50463
spoofing attack
x-forwarded-for
ip address manipulation
caddy 2
trusted proxy directive
security vulnerability
unix
The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when
trust_header X-Forwarded-For is used, allows attackers to spoof their
source IP address via an X-Forwarded-For header, which may bypass a
protection mechanism (trusted_proxy directive in reverse_proxy or IP
address range restrictions).
Related
prion
prion
Design/Logic Flaw
2023-12-10 23:15:00
veracode
veracode
IP Spoofing
2023-12-11 08:25:29
nvd
nvd
CVE-2023-50463
2023-12-10 23:15:07
osv
osv
Header spoofing in caddy-geo-ip
2023-12-11 00:30:32
Spoofed source IP address in github.com/shift72/caddy-geo-ip
2024-01-02 18:32:43
CVE-2023-50463
2023-12-10 23:15:07
cve
cve
CVE-2023-50463
2023-12-10 23:15:07
cvelist
cvelist
CVE-2023-50463
2023-12-10 00:00:00
github
github
Header spoofing in caddy-geo-ip
2023-12-11 00:30:32