High DLA-835-1 1 CVE

cakephp - security update

Published Feb 24, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	cakephp	1.3.15-1+deb7u2

Vulnerabilities 1

High 7.5

CVE-2016-4793 Public exploit

CakePHP allows remote attackers to spoof their IP

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.

cakephp/cakephp cakephp cakephp Debian Ubuntu Packagist

Jan 23, 2017