Skip to content
OpenAdvisories

Package · Debian

mod-wsgi

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-2255

    Incorrect header handling in mod-wsgi

    A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

    mod-wsgi mod-wsgi mod-wsgi Debian Ubuntu PyPI