PT-2026-109669 · Pairdrop · Airdrop
CVSS v3.1
4.2
متوسطة
| المتجه | AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PairDrop versions prior to 1.11.3
Description
An IP spoofing issue exists in the
Peer. setIP function. Remote attackers can join discovery rooms of other networks by providing a forged cf-connecting-ip header. On self-hosted instances not protected by Cloudflare, attackers who possess a victim's public IP address can masquerade as a local device to send or receive files.Recommendations
Update PairDrop to version 1.11.3 or later.
إصلاح
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Airdrop