Query PR

github/codeql#9339

Language

C#

CVE(s) ID list

• CVE-20nn-nnnnn

CWE

CWE-348

Report

If an application trusts an HTTP request header like X-Forwarded-For to accurately specify the remote IP address of the connecting client.

Result(s)

Provide at least one useful result found by your query, on some revision of a real project.

• amo-com/lib-dotnet : source -> sink
• joshualzb/LT.Component : source -> sink

Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc).

• Yes
• No

Blog post link

No response