CVE-2023-44463

Name of the Vulnerable Software and Affected Versions pretix versions prior to 2023.7.1

Description An issue was discovered in the application where incorrect parsing of configuration files causes it to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application.

Recommendations For versions prior to 2023.7.1, update to version 2023.7.1 or later to resolve the issue. As a temporary workaround, consider restricting the trust of X-Forwarded-For headers until a patch is applied.