[HIGH] CakePHP allows remote attackers to spoof their IP

PKSA-22c4-k52d-35hx CVE-2016-4793 GHSA-j8p3-8m69-2hqq

Affected package: cakephp/cakephp

Affected version: >=3.2.0-rc1,<3.2.5|>=3.1.0-beta1,<3.1.12|>=3.0.0-rc1,<3.0.17|>=2.8.0-rc1,<2.8.2|>=2.7.0-rc1,<2.7.11|>=1.2.0,<2.6.13

Reported by:
GitHub