high7.5
CVE-2020-8984
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
Impact
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zend | Zendto | Versions 3.10, 3.11, 3.12, 3.13, 3.20, 3.51 |