Critical severity9.8NVD Advisory· Published Jan 30, 2026· Updated Apr 15, 2026
CVE-2020-37056
CVE-2020-37056
Description
Crystal Shard http-protection 0.2.0 contains an IP spoofing vulnerability that allows attackers to bypass protection middleware by manipulating request headers. Attackers can hardcode consistent IP values across X-Forwarded-For, X-Client-IP, and X-Real-IP headers to circumvent security checks and gain unauthorized access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <= 0.2.0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.