{"id":"CVE-2023-44463","aliases":["GHSA-j9gq-w73w-9h6c","PYSEC-2023-187"],"url":"https://o3.security/vulnerability/CVE-2023-44463","summary":"pretix potential IP address spoofing vulnerability","details":"An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application.","published":"2023-10-02T00:00:00Z","modified":"2026-07-15T01:49:15.553386107Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"pretix","fixedVersion":"2023.7.1"}],"fix":{"url":"https://github.com/pretix/pretix/commit/ccdce2ccb8207b82501af3c03f50abc0f819b469","label":"pretix/pretix@ccdce2c"},"references":[{"type":"WEB","url":"https://github.com/pretix/pretix/compare/v2023.7.0...v2023.7.1"},{"type":"WEB","url":"https://github.com/pretix/pretix/tags"},{"type":"WEB","url":"https://pretix.eu/about/en/ticketing"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/44xxx/CVE-2023-44463.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44463"},{"type":"FIX","url":"https://github.com/pretix/pretix/commit/ccdce2ccb8207b82501af3c03f50abc0f819b469"},{"type":"ARTICLE","url":"https://pretix.eu/about/en/blog/20230911-release-2023-7-1/"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:15.553386107Z"}}