Threats tagged 'ghsa-hqm6-p3v5-x59r'

A vulnerability in the IPRateLimit implementation of FileCodeBox versions up to 2.2 allows remote attackers to bypass IP-based rate limiting and failed attempt restrictions by spoofing the X-Real-IP and X-Forwarded-For HTTP headers. This bypass can enable denial-of-service (DoS) attacks or brute force attempts on share codes.