9.8
Critique
CVE-2021-4226 RSFirewall tries to identify the original IP address by looking at different HTTP headers
Description
RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RSFirewall! 1.1 | premières → < 1.1.25 | 1.1.25 |