Description
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.7.1)
WordPress Plugin Catch Under Construction Security Bypass (1.3.4)
WordPress Plugin Showbiz Pro Responsive Teaser Arbitrary File Upload (1.7.1)
WordPress Plugin AB Press Optimizer Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
WordPress Plugin Simple Events Calendar Multiple Vulnerabilities (1.3.5)