Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:proxy-Addr_project:proxy-Addr:*:*:*:*:*:node.js:*:*

1 brief RSS
critical advisory

Proxy-addr IP Spoofing via Misconfigured IPv4-mapped IPv6 Subnets

The proxy-addr package is vulnerable to IP spoofing due to improper validation of IPv4-mapped IPv6 trust subnets, allowing attackers to manipulate X-Forwarded-For headers and bypass IP-based security controls.

proxy-addr vulnerability web-application network-security
1t 1c