Authentication Bypass by Spoofing Vulnerability Affects IP2Location Country Blocker

CVE-2023-37865

5.3MEDIUM

Key Information

Vendor: Ip2location
Status: Download Ip2location Country Blocker
Vendor: CVE Published:; 4 June 2024

Summary

Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.

Affected Version(s)

Download IP2Location Country Blocker <= 2.29.1

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 4, 2024
Vulnerability Reserved.
Jul 10, 2023

Collectors

NVD DatabaseMitre Database

Credit

Mika (Patchstack Alliance)