GCVE-110-MAGEIA-2022-289

Advisory Published

Vulnetix · Advisory published August 20, 2022

It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations (CVE-2022-2255).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	apache-mod_wsgi	0 (affected), 4.6.8-4.1.mga8 (unaffected)	—

References

Updated apache-mod_wsgi packages fix security vulnerability

advisory

Updated apache-mod_wsgi packages fix security vulnerability

issue

Updated apache-mod_wsgi packages fix security vulnerability

advisory

Browse GCVE Records

74,496 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON