coreActivity < 2.1 - Unauthenticated IP Spoofing

2024-03-2700:00:00

Erwan LR (WPScan)

wpscan.com

plugin

ip addresses

headers

spoofing

curl

logs

software

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

Description The plugin retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value

PoC

As unauthenticated: curl ‘https://example.com/attacker’ -H ‘X-FORWARDED: 127.0.0.1’ Then view the logs and note that the plugin display the IP of the request as 127.0.0.1