We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2022-4529

Security, Antivirus, Firewall – S.A.F <= 2.3.5 - IP Address Spoofing to Protection Mechanism Bypass



AssignerWordfence
Reserved2022-12-15
Published2024-09-05
Updated2024-09-05

Description

The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.



MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Problem types

CWE-348 Use of Less Trusted Source

Product status

Default status
0x4003452ff0

*
affected

Timeline

2024-09-04:Disclosed

Credits

Mohammadreza Rashidi 0x4003453040

References

https://www.wordfence.com/threat-intel/vulnerabilities/id/cd177a43-6059-4125-9408-1090b9a54117?source=cve

https://plugins.trac.wordpress.org/browser/security-antivirus-firewall/trunk/includes/wptsafEnv.php#L68

cve.org CVE-2022-4529

nvd.nist.gov CVE-2022-4529

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2022-4529
Subscribe to our newsletter to learn more about our work.