https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 04:42:48 +0000 https://vulnerability.circl.lu/vuln/cve-2022-2255 <p><strong>Affected:</strong> mod_wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> <p><strong>Affected:</strong> mod_wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> https://vulnerability.circl.lu/vuln/cve-2022-2255 https://vulnerability.circl.lu/vuln/usn-5551-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mod-wsgi, Ubuntu:20.04:LTS: mod-wsgi, Ubuntu:22.04:LTS: mod-wsgi</p> <p>It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mod-wsgi, Ubuntu:20.04:LTS: mod-wsgi, Ubuntu:22.04:LTS: mod-wsgi</p> <p>It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations.</p> https://vulnerability.circl.lu/vuln/usn-5551-1