tg123 vulnerabilities

Products

• github.com/tg123/sshpiper 1

Latest tg123 CVEs

Newest publication first

1. CVE-2024-35175 sshpiper's Enabling of Proxy Protocol without proper feature flagging allows faking source address

   Published 2024-05-14

   Medium·CVSS 5.3 EPSS 0.26%

   sshpiper is a reverse proxy for sshd. Starting in version 1.0.50 and prior to version 1.3.0, the way the proxy protocol listener is implemented in sshpiper can allow an attacker to forge their connecting address. Commit 2ddd69876a1e1119059debc59fe869cb4e754430 added the proxy pro...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.