Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-4226 EUVD-2021-34084GHSA-j8wj-77mv-262g

RSFirewall < 1.1.25 - IP Block Bypass

Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by WPScan

Description

RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented.

Affected products

VendorProductAffectedFixed
— RSFirewall! < 1.1.25 1.1.25

References