Mattermost · Mattermost · CVE-2022-2366
**Name of the Vulnerable Software and Affected Versions**
Mattermost versions 6.7.0 and earlier
**Description**
The issue is related to an incorrect default configuration for the trusted IP header, which allows an attacker to bypass some rate limitations or use manipulated IPs for audit logging by manipulating request headers.
**Recommendations**
For Mattermost versions 6.7.0 and earlier, update to a version later than 6.7.0 to resolve the issue.