9.8
Critical
CVE-2021-4226 RSFirewall tries to identify the original IP address by looking at different HTTP headers
Description
RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSFirewall! 1.1 | earliest → < 1.1.25 | 1.1.25 |