CVE-2025-51663: High severity FileCodeBox FileCodeBox vulnerability
A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share codes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-51663?
The severity of CVE-2025-51663 is considered high due to its potential to allow remote DoS attacks and brute force exploits.
How do I fix CVE-2025-51663?
To fix CVE-2025-51663, update to the latest version of FileCodeBox beyond 2.2 where the vulnerability has been addressed.
What types of attacks can exploit CVE-2025-51663?
CVE-2025-51663 can be exploited for denial-of-service (DoS) attacks and brute force attempts by bypassing rate limiting.
Which versions of FileCodeBox are affected by CVE-2025-51663?
FileCodeBox versions up to and including 2.2 are affected by CVE-2025-51663.
Can CVE-2025-51663 be exploited remotely?
Yes, CVE-2025-51663 can be exploited remotely by attackers manipulating HTTP headers.