Skip to content
OpenAdvisories
High DLA-3111-1 1 CVE

mod-wsgi - security update

Published Sep 15, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 mod-wsgi 4.6.5-1+deb10u1

Vulnerabilities 1

  • High 7.5
    CVE-2022-2255

    Incorrect header handling in mod-wsgi

    A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

    mod-wsgi mod-wsgi mod_wsgi mod-wsgi Debian Ubuntu Azure Linux PyPI