Lack Of IP Address Verification

🗓️ 19 Jul 2023 02:28:54Reported by Veracode Vulnerability DatabaseType

CasaOS-Gateway vulnerable to lack of IP address verification allows injection of malicious commands

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2023-37265	18 Jul 202300:45	–	circl
CNNVD	CasaOS 访问控制错误漏洞	17 Jul 202300:00	–	cnnvd
CNVD	IBM DB2 is a relational database management system from International Business Machines (IBM). The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a denial of service.	19 Jul 202300:00	–	cnvd
CVE	CVE-2023-37265	17 Jul 202320:59	–	cve
Cvelist	CVE-2023-37265 Incorrect identification of source IP addresses in CasaOS	17 Jul 202320:59	–	cvelist
Github Security Blog	CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202314:36	–	github
GitLab Advisory Database	CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202300:00	–	gitlab
Nuclei	CasaOS < 0.4.4 - Authentication Bypass via Internal IP	4 Jun 202603:48	–	nuclei
NVD	CVE-2023-37265	17 Jul 202321:15	–	nvd
OSV	CVE-2023-37265 Incorrect identification of source IP addresses in CasaOS	17 Jul 202320:59	–	osv

Vulners

Node

Source	Link
github	www.github.com/IceWhaleTech/CasaOS-Gateway/commit/391dd7f0f239020c46bf057cfa25f82031fc15f7
github	www.github.com/advisories/GHSA-vjh7-5r6x-xh6g
github	www.github.com/IceWhaleTech/CasaOS-Gateway/security/advisories/GHSA-vjh7-5r6x-xh6g
sonarsource	www.sonarsource.com/blog/security-vulnerabilities-in-casaos

07 Apr 2025 14:52Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

EPSS0.91121

SSVC