Github.Com Shift72 Caddy-Geo-Ip vulnerabilities

1 known vulnerability affecting github.com/shift72_caddy-geo-ip.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-50463MEDIUM≥ 0, ≤ 0.6.02023-12-11

CVE-2023-50463 [MEDIUM] CWE-290 Header spoofing in caddy-geo-ip Header spoofing in caddy-geo-ip The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism (trusted_proxy directive in reverse_proxy or IP address range restrictions).