Github.Com Icewhaletech Casaos-Gateway vulnerabilities

1 known vulnerability affecting github.com/icewhaletech_casaos-gateway.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2023-37265CRITICALPoC≥ 0, < 0.4.42023-07-17

CVE-2023-37265 [CRITICAL] CWE-306 CasaOS Gateway vulnerable to incorrect identification of source IP addresses CasaOS Gateway vulnerable to incorrect identification of source IP addresses ### Impact Unauthenticated attackers can execute arbitrary commands as `root` on CasaOS instances. ### Patches The problem was addressed by improving the detection of client IP addresses in 391dd7f. This patch is part of CasaOS 0.4.4. ### Workarounds Users should upgrade to CasaOS 0.4.4. If they can't, th