CVE-2023-44463: Medium severity pretix vulnerability
Published Oct 2, 2023
·Updated
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application.
Affected Software
2 affected componentsFixes available
pip/pretix<2023.7.1
2023.7.1
rami pretix<2023.7.1
Remediation
Event History
Oct 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Advisory Published
09:30 PM
Frequently Asked Questions
1
What is CVE-2023-44463?
CVE-2023-44463 is a vulnerability in pretix before 2023.7.1 that allows IP address spoofing by users of the application.
2
How can the vulnerability be exploited?
The vulnerability can be exploited by manipulating X-Forwarded-For headers to spoof IP addresses.
3
What is the severity of CVE-2023-44463?
The severity of CVE-2023-44463 is medium, with a severity value of 5.3.
4
How can I fix CVE-2023-44463?
To fix CVE-2023-44463, update pretix to version 2023.7.1 or higher.
5
Where can I find more information about CVE-2023-44463?
You can find more information about CVE-2023-44463 on the pretix GitHub repository.