https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:05:29.101546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-45132 CVE-2023-45132 — IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For 2026-10-09T12:05:29.118170+00:00

Affected: wargio naxsi

NAXSI is an open-source maintenance web application firewall (WAF) for NGINX. An issue present starting in version 1.3 and prior to version 1.6 allows someone to bypass the WAF when a malicious `X-Forwarded-For` IP matches `IgnoreIP` `IgnoreCIDR` rules. This old code was arranged to allow older NGINX versions to also support `IgnoreIP` `IgnoreCIDR` when multiple reverse proxies were present. The issue is patched in version 1.6. As a workaround, do not set any `IgnoreIP` `IgnoreCIDR` for older versions.