IP Spoofing

2023-12-1108:25:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ip spoofing

caddy-geo-ip

trust_header

req.remoteaddr

bypass ip restrictions

x-forwarded-for

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

32.2%

JSON

caddy-geo-ip is vulnerable to IP Spoofing attacks. The vulnerability is due to insecure usage of the trust_header. When trust_header is configured, req.Remoteaddr is overwritten. This allows an attacker to bypass IP range restrictions, and spoof IP addresses through the X-Forwarded-For header.