In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes), as demonstrated by remote denial of service (daemon crash). CREATE(Triage):(User=admin) CVE-2022-22707 (https://nvd.nist.gov/vuln/detail/CVE-2022-22707)
