CVE-2024-34451

Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with di...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values. NOTE: the vendor's position is that Ghost should be installed with a reverse proxy that allows only trusted X-Forwarded-For headers.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami ghost

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.110.4"}]}]

Références

advisory nvd.nist.gov
advisory github.com
package github.com
web docs.google.com
web ghost.org