CVE-2022-2366 — Incorrect defaults can cause attackers to bypass rate limitations
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated …
Published: 2022-07-11 · CVSS: 5.6 · CVSS 3.1
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7