Unrated severityNVD Advisory· Published Jul 11, 2022· Updated Dec 6, 2024
Incorrect defaults can cause attackers to bypass rate limitations
CVE-2022-2366
Description
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.
Affected products
1- Range: 6.7.x 6.7.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- mattermost.com/security-updates/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.