Описание
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | |
| bionic | DNE | |
| cosmic | not-affected | |
| devel | DNE | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-apps-legacy/xenial | needed | |
| esm-apps/focal | not-affected | |
| esm-apps/jammy | not-affected | |
| esm-apps/xenial | ignored | end of ESM support, was needed |
Показывать по
10
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
больше 9 лет назад
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
CVSS3: 7.5
debian
больше 9 лет назад
The clientIp function in CakePHP 3.2.4 and earlier allows remote attac ...
CVSS3: 7.5
github
больше 4 лет назад
CakePHP allows remote attackers to spoof their IP
5 Medium
CVSS2
7.5 High
CVSS3