codeigniter4/framework vulnerabilities (Packagist)
19 vulnerabilities.
-
codeigniter4/frameworkPackagist CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules 9.8 Critical -
codeigniter4/frameworkPackagist CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames 7.5 High -
codeigniter4/frameworkPackagist CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions 9.4 Critical -
codeigniter4/frameworkPackagist CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure() 4.8 Medium -
codeigniter4/frameworkPackagist CodeIgniter: Uploaded file extension validation bypass in `ext_in` rule 9.8 Critical -
codeigniter4/frameworkPackagist CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability 9.8 Critical -
codeigniter4/frameworkPackagist CodeIgniter validation of header name and value 5.3 Medium -
codeigniter4/frameworkPackagist CodeIgniter4 Language class DoS Vulnerability 7.5 High -
codeigniter4/frameworkPackagist CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment 7.5 High -
codeigniter4/frameworkPackagist Remote Code Execution Vulnerability in Validation Placeholders 9.8 Critical -
codeigniter4/frameworkPackagist CodeIgniter is vulnerable to improper authentication via Session Handlers 8.6 High -
codeigniter4/frameworkPackagist CodeIgniter is vulnerable to IP address spoofing when using proxy 7.0 High -
codeigniter4/frameworkPackagist Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4 2.6 Low -
codeigniter4/frameworkPackagist Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4 6.3 Medium -
codeigniter4/frameworkPackagist Remote CLI Command Execution Vulnerability in CodeIgniter4 9.4 Critical -
codeigniter4/frameworkPackagist Cross-site Scripting Vulnerability in CodeIgniter4 5.4 Medium -
codeigniter4/frameworkPackagist Deserialization of Untrusted Data in Codeigniter4 7.7 High -
codeigniter4/frameworkPackagist CodeIgniter Improper Privilege Management 8.8 High -
codeigniter4/frameworkPackagist CodeIgniter HTTP Header Injection 7.5 High