{"action":"Upgrade codeigniter4/framework to 4.2.11 or later.","affected":[{"fixed":"4.2.11","introduced":"0"}],"component":"codeigniter4/framework","cve_ids":["CVE-2022-23556"],"ecosystem":"Packagist","epss":0.00398,"exploited":false,"fixed_versions":["4.2.11"],"ghsa_id":"GHSA-ghw3-5qvm-3mqc","id":"tcs_01M5KF2SNSZ1AZE8AYHDB3X3EF","modified_at":"2023-12-06T01:01:59.440156Z","published_at":"2022-12-22T19:59:58Z","references":["https://osv.dev/vulnerability/GHSA-ghw3-5qvm-3mqc","https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-ghw3-5qvm-3mqc","https://nvd.nist.gov/vuln/detail/CVE-2022-23556","https://github.com/codeigniter4/CodeIgniter4/commit/5ca8c99b2db09a2a08a013836628028ddc984659","https://codeigniter4.github.io/userguide/incoming/request.html#CodeIgniter\\HTTP\\Request::getIPAddress","https://github.com/FriendsOfPHP/security-advisories/blob/master/codeigniter4/framework/CVE-2022-23556.yaml","https://github.com/codeigniter4/CodeIgniter4"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GHSA-ghw3-5qvm-3mqc","url":"https://osv.dev/vulnerability/GHSA-ghw3-5qvm-3mqc"}],"summary":"CodeIgniter4 allows spoofing of IP address when using proxy"}