CyberSecBulletin

Mod Wsgi vulnerabilities

We track 1 vulnerability in Mod Wsgi products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2022.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Mod Wsgi vulnerabilities

  • 7.5 High severity

    mod_wsgi: Insufficient Verification of Data Authenticity

    CVE-2022-2255Mod Wsgi

    A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.