Skip to content
Threat Feed
Subscribe

Product

Proxy-Addr (< 2.0.8)

1 brief RSS
critical advisory

Proxy-addr IP Spoofing via Misconfigured IPv4-mapped IPv6 Subnets

The proxy-addr package is vulnerable to IP spoofing due to improper validation of IPv4-mapped IPv6 trust subnets, allowing attackers to manipulate X-Forwarded-For headers and bypass IP-based security controls.

proxy-addr vulnerability web-application network-security
1t 1c