In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.

Published Feb 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre