BaseFortify

Publication date: 2025-11-19

Last updated on: 2025-11-24

Assigner: MITRE

Description

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share codes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-19

Last Modified

2025-11-24

Generated

2026-07-06

AI Q&A

2025-11-19

EPSS Evaluated

2026-07-05

NVD

CVE-2025-51663

Affected Vendors & Products

Vendor	Product	Version / Range
lanol	filecodebox	to 2.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-305	The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Attack-Flow Graph

Executive Summary

This vulnerability in the IPRateLimit implementation of FileCodeBox up to version 2.2 allows remote attackers to bypass IP-based rate limiting and failed attempt restrictions by faking the X-Real-IP and X-Forwarded-For HTTP headers.

Impact Analysis

Attackers can exploit this vulnerability to perform denial-of-service (DoS) attacks or brute force share codes by circumventing rate limits and failed attempt protections.

Hi! I’m here to help you understand CVE-2025-51663. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70