packages:
  - module: github.com/gin-gonic/gin
    symbols:
      - Context.ClientIP
    versions:
      - fixed: 1.6.3-0.20210406033725-bfc8ca285eb4
description: |
    Due to improper HTTP header santization, a malicious user can spoof their
    source IP address by setting the X-Forwarded-For header. This may allow
    a user to bypass IP based restrictions, or obfuscate their true source.
published: 2021-04-14T20:04:52Z
cves:
  - CVE-2020-28483
ghsas:
  - GHSA-h395-qcrw-5vmq
credit: '@sorenh'
links:
    pr: https://github.com/gin-gonic/gin/pull/2632
    commit: https://github.com/gin-gonic/gin/commit/bfc8ca285eb46dad60e037d57c545cd260636711
    context:
      - https://github.com/gin-gonic/gin/pull/2474