Executive brief
TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation
Affected products
- Go github.com/almeidapaulopt/tsdproxy
Junglewise Threat Intelligence
TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation
Severity: low · CVSS 3.1 · Published 2026-07-10
Technologies: github.com/almeidapaulopt/tsdproxy (Go). Vendors: Go.
Related threats
- GO-2026-5982 - TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services in github.com/almeidapaulopt/tsdproxy
- GO-2026-5969 - TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation in github.com/almeidapaulopt/tsdproxy
- almeidapaulopt TsDProxy IP spoofing via X-Forwarded-For injection
- TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services
- almeidapaulopt TSDProxy privilege escalation via auth token leakage