CVE-2023-44463

Summary

CVE-2023-44463: A vulnerability was discovered in pretix before version 2023.7.1. Due to incorrect configuration file parsing, the application unintentionally trusts unchecked X-Forwarded-For headers. This issue can result in IP address spoofing, allowing users to masquerade their true IP addresses to the application. It is recommended that users update to the latest version of pretix to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.