CVE-2022-24594: Waline

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.

Affected products

• Waline Waline: version 1.6.1 only

Published 2022-02-25. Last modified 2026-06-17.