Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47179

HistoryMay 27, 2024 - 5:17 a.m.

HTTP Header Spoofing

2024-05-2705:17:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

3

vulnerable

http header

spoofing

software

reverse proxies

ip trust

7 High

AI Score

Confidence

Low

silverstripe/framework is vulnerable to HTTP header spoofing. The vulnerability is due to trusting all originating IPs to include HTTP headers for Hostname, IP, and Protocol, which results in reverse proxies forwarding requests while retaining the original request information.

7 High

AI Score

Confidence

Low