CVE-2024-44930

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-29 · updated 2026-06-17
Weakness: CWE-79

Description

Serilog before v2.1.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specifying an arbitrary IP as a value of X-Forwarded-For or Client-Ip headers while performing HTTP requests.

Affected products

Serilog-Contrib Serilog-Enrichers-Clientinfo: before 2.1.0 — fixed in 2.1.0

How to fix

Upgrade to a fixed version: Serilog-Contrib Serilog-Enrichers-Clientinfo 2.1.0. Check the vendor advisory for mitigations.

References

https://github.com/serilog-contrib/serilog-enrichers-clientinfo/issues/29
https://github.com/serilog-contrib/serilog-enrichers-clientinfo/releases/tag/v2.1.0

Get alerted when CVE-2024-44930 or the next vulnerability affects your stack