Mega Fence
1 CVEs
product
Monthly
Mega-Fence (webgate-lib.*) 25.1.914 and prior trusts the first value of the X-Forwarded-For (XFF) header as the client IP without validating a trusted proxy chain. [CVSS 6.5 MEDIUM]
Authentication Bypass
Mega Fence
NVD
CVSS 3.1
6.5
EPSS
0.1%
EPSS 0%
CVSS 6.5
MEDIUM
POC
This Month
Mega-Fence (webgate-lib.*) 25.1.914 and prior trusts the first value of the X-Forwarded-For (XFF) header as the client IP without validating a trusted proxy chain. [CVSS 6.5 MEDIUM]
Authentication Bypass
Mega Fence
NVD