| Package | Affected versions | Patched versions |
|---|---|---|
| chetcpasswd | < 2.4 | 2.4 |
Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free