CVE-2025-51663

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share codes.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-11-19

Last modified

2025-11-20

Weaknesses

CWE-305

Affected products

• Filecodebox (Lanol)

References

• https://github.com/vastsa/FileCodeBox
• https://github.com/vastsa/FileCodeBox/issues/350