A vulnerability in Heimdall, a cloud-native Identity Aware Proxy and Access Control Decision service, allows for IP spoofing via unvalidated forwarding headers. This issue, patched in version 0.17.17, could enable attackers to manipulate client IP addresses, potentially bypassing security measures. The vulnerability arises from Heimdall's extraction of client IP addresses from Forwarded and X-Forwarded-Fo [truncated]
A vulnerability in Heimdall, a cloud native Identity Aware Proxy and Access Control Decision service, allows for Forwarded Header Injection via an unsanitized Host header in proxy mode. This issue, patched in version 0.17.17, could potentially allow an attacker to spoof IP addresses for upstream services. Heimdall's proxy mode constructs the Forwarded HTTP header after executing the matched rule pipeline [truncated]
