CVE Daily

CVE-2023-37865

Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Locat...

Medium CVSS 5.3

Overview

Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.

CWE: CWE-290 Published: 2024-06-04T07:15:43.127
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.3 (MEDIUM)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags