Advisories · Technology
tobychui zoraxy.
Every CVE that names tobychui zoraxy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization
- tobychui zoraxy
- Privilege escalation
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6
- tobychui zoraxy
- Authentication bypass