A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-idnaUpgrade python39-chardetUpgrade python39-psycopg2Upgrade python39-rpm-macrosUpgrade python39-cryptographyUpgrade python39-urllib3Upgrade python39-pysocksUpgrade python39-pipUpgrade python39-wheelUpgrade python39-wheel-wheelUpgrade python39-setuptools-wheelUpgrade python39-plyUpgrade python39-mod_wsgiUpgrade python39-pip-wheelUpgrade python39-psutilUpgrade python39-cffiUpgrade python39-tomlUpgrade python39-requestsUpgrade python39-setuptoolsUpgrade python39Upgrade python39-sixUpgrade python39-idleUpgrade python39-pycparserUpgrade python39-scipyUpgrade python39-psycopg2-testsUpgrade python39-numpy-f2pyUpgrade python39-testUpgrade python39-develUpgrade python39-numpyUpgrade python39-libsUpgrade python39-lxmlUpgrade python39-PyMySQLUpgrade python39-numpy-docUpgrade python39-psycopg2-docUpgrade python39-tkinterUpgrade python39-pyyaml | May 14, 2025 | Aug 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python3-mod_wsgiUpgrade mod_wsgi-debuginfoUpgrade python2-mod_wsgi | Sep 28, 2023 | Aug 25, 2022 |
| Debian | — | Upgrade mod-wsgi | Sep 19, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-mod_wsgiUpgrade python3-mod_wsgi | Feb 9, 2023 | Aug 25, 2022 |
| Oracle_linux | — | Upgrade python39-rpm-macrosUpgrade python39-sixUpgrade python39-idnaUpgrade python39-psycopg2-docUpgrade python39-idleUpgrade python39-cryptographyUpgrade python39-numpy-f2pyUpgrade python39-scipyUpgrade python39-PyMySQLUpgrade python39-pyyamlUpgrade python39-setuptools-wheelUpgrade python39-lxmlUpgrade python39-psycopg2-testsUpgrade python39-pycparserUpgrade python39-libsUpgrade python39-numpyUpgrade python39-urllib3Upgrade python39-develUpgrade python39-numpy-docUpgrade python39-tomlUpgrade python39-mod_wsgiUpgrade python39-wheel-wheelUpgrade python39-pysocksUpgrade python39-plyUpgrade python39-wheelUpgrade python39-psycopg2Upgrade python39-pip-wheelUpgrade python39-pipUpgrade python39-cffiUpgrade python39-tkinterUpgrade python39Upgrade python39-testUpgrade python39-setuptoolsUpgrade python39-requestsUpgrade python39-psutilUpgrade python39-chardet | May 14, 2025 | Jul 18, 2022 |
| Redhat_linux | — | Upgrade python39-numpy-debuginfoUpgrade python39-scipyUpgrade python39-tkinterUpgrade python39-cffi-debuginfoUpgrade python-cffi-debugsourceUpgrade python39-psutilUpgrade python39-pyyaml-debuginfoUpgrade python39-setuptoolsUpgrade numpy-debugsourceUpgrade python39-psycopg2Upgrade PyYAML-debugsourceUpgrade python39-wheel-wheelUpgrade python39-psutil-debuginfoUpgrade python39-wheelUpgrade python39-testUpgrade python39-scipy-debuginfoUpgrade python39-mod_wsgiUpgrade python39-pysocksUpgrade python39-numpy-docUpgrade python39-requestsUpgrade python39-pip-wheelUpgrade python-psutil-debugsourceUpgrade python39-psycopg2-debuginfoUpgrade python39-pipUpgrade python39-lxml-debuginfoUpgrade python39-cffiUpgrade python39-debuginfoUpgrade python39-psycopg2-docUpgrade python39-psycopg2-testsUpgrade python39-plyUpgrade python-cryptography-debugsourceUpgrade python39-pycparserUpgrade python39-pyyamlUpgrade python39-urllib3Upgrade python39-lxmlUpgrade python39-PyMySQLUpgrade python39-debugsourceUpgrade python39-develUpgrade python39-chardetUpgrade scipy-debugsourceUpgrade python39-numpyUpgrade python39-idnaUpgrade python39-setuptools-wheelUpgrade python39-libsUpgrade python39-rpm-macrosUpgrade python39-numpy-f2pyNo solution existsUpgrade python39-sixUpgrade python39Upgrade python39-cryptographyUpgrade python39-idleUpgrade python-psycopg2-debugsourceUpgrade python-lxml-debugsourceUpgrade python39-tomlUpgrade python39-cryptography-debuginfo | May 13, 2025 | Aug 25, 2022 |
| Rocky_linux | — | Upgrade python39-psutilUpgrade python39-pyyaml-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python-psutil-debugsourceUpgrade python39-cryptography-debuginfoUpgrade python-cffi-debugsourceUpgrade numpy-debugsourceUpgrade python39-cffiUpgrade scipy-debugsourceUpgrade python39Upgrade python39-mod_wsgiUpgrade python39-psutil-debuginfoUpgrade python39-tkinterUpgrade python39-numpy-debuginfoUpgrade PyYAML-debugsourceUpgrade python39-debugsourceUpgrade python39-psycopg2Upgrade python39-scipyUpgrade python39-debuginfoUpgrade python-cryptography-debugsourceUpgrade python39-psycopg2-docUpgrade python39-develUpgrade python39-numpyUpgrade python39-cryptographyUpgrade python39-cffi-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python39-pyyamlUpgrade python39-psycopg2-testsUpgrade python39-scipy-debuginfoUpgrade python39-lxmlUpgrade python39-idleUpgrade python-lxml-debugsourceUpgrade python39-libsUpgrade python39-testUpgrade python39-lxml-debuginfoUpgrade python39-numpy-f2py | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade apache2-mod_wsgiUpgrade apache2-mod_wsgi-python3 | Nov 17, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade libapache2-mod-wsgi-py3Upgrade libapache2-mod-wsgi | Aug 5, 2022 | Aug 4, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub