Due to improper HTTP header sanitization, a malicious user can spoof their source IP address by setting the X-Forwarded-For header. This may allow a user to bypass IP based restrictions, or obfuscate their true source.
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2021-0052" }