CVE-2016-4793
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
- Update to 1.3.15-1+deb7u2build0.14.04.1
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for cakephp in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 1
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
Check your installed stack and versions against the current vulnerability feeds.