CVE-2022-23556
CodeIgniter is vulnerable to IP address spoofing when using proxy
Résumé
CodeIgniter is vulnerable to IP address spoofing when using proxy
Description d'origine
La description telle que publiée par la source (souvent en anglais).
CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the server is behind a reverse proxy. This issue has been patched, please upgrade to version 4.2.11 or later, and configure Config\App::$proxyIPs. As a workaround, do not use $request->getIPAddress().
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com