GO-2023-2394

vendorUSosv

Spoofed source IP address in github.com/shift72/caddy-geo-ip

view advisory published 2024-01-02Licence: per source

The caddy-geo-ip (aka GeoIP) middleware for Caddy 2 allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism (trusted_proxy directive in reverse_proxy or IP address range restrictions).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-50463US	medium6.5	0.66% (51st)	—	2023-12-10
The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-F…

references

External citations — patches, advisories, analysis.

https://github.com/shift72/caddy-geo-ip/issues/4REPORT
https://nvd.nist.gov/vuln/detail/CVE-2023-50463ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan