Authentication Bypass by Spoofing Vulnerability Affects IP2Location Country Blocker

CVE-2023-37865

Summary

An Authentication Bypass by Spoofing vulnerability exists in IP2Location's Country Blocker plugin. This flaw allows attackers to exploit improper access control measures, enabling them to gain unauthorized access to functionalities that should be restricted. Specifically, versions up to 2.29.1 are affected by this vulnerability, potentially allowing malicious users to bypass authentication mechanisms, jeopardizing the security of user data and system integrity.

References