CVE-2023-37865: IP2LOCATION Country Blocker

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.

Affected products

• IP2LOCATION Country Blocker: before 2.29.2 (fixed in 2.29.2)

Published 2024-06-04. Last modified 2026-06-17.