CVE-2022-24594

Published February 25th, 2022

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.

walinejs/waline

💬 A Simple, Safe Comment System

GitHub

3.02K