CVE-2022-23556

CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the server is behind a reverse proxy. This issue has been patched, please upgrade to version 4.2.11 or later, and configure `Config\App::$proxyIPs`. As a workaround, do not use `$request->getIPAddress()`.

• CWE-345

• https://github.com/codeigniter4/CodeIgniter4/commit/5ca8c99b2db09a2a08a013836628028ddc984659Patch, Third Party Advisory
• https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-ghw3-5qvm-3mqcExploit, Third Party Advisory
• https://github.com/codeigniter4/CodeIgniter4/commit/5ca8c99b2db09a2a08a013836628028ddc984659Patch, Third Party Advisory
• https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-ghw3-5qvm-3mqcExploit, Third Party Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2355The Easy Username Updater WordPress plugin before 1.0.5 does…6.5
• CVE-2022-23551aad-pod-identity assigns Azure Active Directory identities t…5.3
• CVE-2022-23552Grafana is an open-source platform for monitoring and observ…5.4
• CVE-2022-23553Alpine is a scaffolding library in Java. Alpine prior to ver…7.5
• CVE-2022-23554Alpine is a scaffolding library in Java. Alpine prior to ver…5.4
• CVE-2022-23555authentik is an open-source Identity Provider focused on fle…8.8
• CVE-2022-23557Tensorflow is an Open Source Machine Learning Framework. An …6.5
• CVE-2022-23558Tensorflow is an Open Source Machine Learning Framework. An …8.8
• CVE-2022-23559Tensorflow is an Open Source Machine Learning Framework. An …8.8
• CVE-2022-2356The Frontend File Manager & Sharing WordPress plugin before …8.8
• CVE-2022-23560Tensorflow is an Open Source Machine Learning Framework. An …8.8
• CVE-2022-23561Tensorflow is an Open Source Machine Learning Framework. An …8.8