Skip to content
OpenAdvisories

Vendor

wargio

1 known vulnerabilities.

Products

naxsi 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2023-45132

    IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For

    NAXSI is an open-source maintenance web application firewall (WAF) for NGINX. An issue present starting in version 1.3 and prior to version 1.6 allows someone to bypass the WAF when a malicious `X-Forwarded-For` IP matches `IgnoreIP` `IgnoreCIDR` rules. This …

    wargio naxsi