CVE-2023-45132

    Dashboard / Vulnerabilities / CVE-2023-45132

    CVE-2023-45132

    Published: 11 Oct 2023Last Modified: 12 Aug 2026

    Summary: IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For

    Details: NAXSI is an open-source maintenance web application firewall (WAF) for NGINX. An issue present starting in version 1.3 and prior to version 1.6 allows someone to bypass the WAF when a malicious `X-Forwarded-For` IP matches `IgnoreIP` `IgnoreCIDR` rules. This old code was arranged to allow older NGINX versions to also support `IgnoreIP` `IgnoreCIDR` when multiple reverse proxies were present. The issue is patched in version 1.6. As a workaround, do not set any `IgnoreIP` `IgnoreCIDR` for older versions.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45132.json, https://github.com/wargio/naxsi/security/advisories/GHSA-7qjc-q4j9-pc8x, https://nvd.nist.gov/vuln/detail/CVE-2023-45132, https://github.com/wargio/naxsi/commit/1b712526ed3314dd6be7e8b0259eabda63c19537, https://github.com/wargio/naxsi/pull/103

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- b77c17261aba04e749a5072b96f97294bf830149
    Fixed -f74611640b76a798cdedcc3fa1147b69eaac969f

    Affected versions

    1.5rc1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-45132 | CVE-DB