lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
References
Link | Resource |
---|---|
http://jul.es/pipermail/zendto/2020-January/003845.html | Third Party Advisory |
https://zend.to/changelog.php | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2020-03-24 21:15
Updated : 2024-02-04 21:00
NVD link : CVE-2020-8984
Mitre link : CVE-2020-8984
CVE.ORG link : CVE-2020-8984
JSON object : View
Products Affected
zend
- zendto
CWE
CWE-346
Origin Validation Error