vulnerability

Huawei EulerOS: CVE-2022-2255: mod-wsgi security update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:C/A:N)
Published
Aug 25, 2022
Added
Feb 9, 2023
Modified
Aug 13, 2025

Description

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Solutions

huawei-euleros-2_0_sp8-upgrade-python2-mod_wsgihuawei-euleros-2_0_sp8-upgrade-python3-mod_wsgi
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.