Lucene search
K

4 matches found

Veracode
Veracode
added 2022/12/23 7:34 a.m.21 views

Spoofing Attacks

codeigniter4/framework is vulnerable to spoofing attacks. The vulnerability exists in the getIPAddress in RequestTrait.php because the vulnerability may allow attackers to spoof their ip address when the server is behind a reverse proxy...

7.5CVSS7.1AI score0.0014EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2022/12/22 7:15 p.m.10 views

CVE-2022-23556

CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the server is behind a reverse proxy. This issue has been patched, please upgrade to version 4.2.11 or later, and configure Config\App::$proxyIPs. As a workaround, do not use...

7.5CVSS0.0014EPSS
Exploits1References2
OSV
OSV
added 2022/12/22 6:50 p.m.13 views

CVE-2022-23556 CodeIgniter is vulnerable to IP address spoofing when using proxy

CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the server is behind a reverse proxy. This issue has been patched, please upgrade to version 4.2.11 or later, and configure Config\App::$proxyIPs. As a workaround, do not use...

7CVSS7.3AI score0.0014EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/12/22 6:50 p.m.12 views

CVE-2022-23556 CodeIgniter is vulnerable to IP address spoofing when using proxy

CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the server is behind a reverse proxy. This issue has been patched, please upgrade to version 4.2.11 or later, and configure Config\App::$proxyIPs. As a workaround, do not use...

7CVSS7.7AI score0.0014EPSS
Exploits1References2
Rows per page
Query Builder