TarsWeb SSO Bypass Vulnerability

TarsWeb, a web application framework, is vulnerable to unauthorized access due to improper handling of the X-Forwarded-For header and lack of authentication checks.

TarsWeb versions prior to 3.0.16 are affected. An attacker can exploit this vulnerability to gain unauthorized access to user and role administration, service configuration, and package upload and deployment features.