CyberRota Analysis
AI-GeneratedThe RealIP middleware in go-chi/chi versions 0.9.0 through 5.3.0 is vulnerable to IP spoofing due to inadequate validation of trusted proxies when processing the X-Forwarded-For header. This flaw allows an attacker to manipulate the request source IP, which could lead to unauthorized access or the falsification of logs. Organizations using affected versions should prioritize patching to mitigate potential security risks associated with this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.