critical9.8
CVE-2021-4226
RSFirewall tries to identify the original IP address by looking at different HTTP headers.
Impact
RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rsjoomla | Rsfirewall\! | before 1.1.25 |