漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
macournoyer thin 输入验证漏洞
Vulnerability Description
Thin web服务器1.2.4之前版本中的lib/thin/connection.rb依赖于X-Forwarded-For头来决定客户的IP地址,这使得远程攻击者可以借助一个修改过的X-Forwarded-For头,欺骗IP地址和隐藏行为。
CVSS Information
N/A
Vulnerability Type
N/A