GHSA-rxg9-hgq7-8pwx

ghsaUSosv

Header spoofing in caddy-geo-ip

view advisory published 2023-12-11Licence: CC-BY-4.0

The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism (trusted_proxy directive in reverse_proxy or IP address range restrictions).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-50463US	medium6.5	0.66% (51st)	—	2023-12-10
The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-F…

references

External citations — patches, advisories, analysis.

https://caddyserver.com/v2WEB
https://github.com/shift72/caddy-geo-ip/issues/4WEB
https://github.com/shift72/caddy-geo-ip/tagsWEB
https://nvd.nist.gov/vuln/detail/CVE-2023-50463ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan