← Database

CVE-2022-31813

CRITICAL CVSS: 9.8 Published: 2022-06-09 Modified: 2026-06-17

Description

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.

Affected Platforms

Apache Http ServerFedoraproject FedoraNetapp Clustered Data Ontap

Weakness Type

CWE-348, CWE-345

References