Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pedro Lineu Orso chetcpasswd X-Forwarded-For HTTP报头欺骗未授权访问漏洞
Vulnerability Description
Pedro Lineu Orso chetcpasswd的2.4之前版本依赖X-Forwarded-For HTTP报头来验证客户端在IP地址ACL上的状态，远程攻击者可以通过欺骗报头来获取未授权访问。
CVSS Information
N/A
Vulnerability Type
N/A