CPE Details
CodeIgniter 4.3.2
4.3.2
2025-03-19
11h39 +00:00
11h39 +00:00
2025-03-19
11h39 +00:00
11h39 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:codeigniter:codeigniter:4.3.2:*:*:*:*:*:*:*
Informations
Vendor
codeigniterProduct
codeigniterVersion
4.3.2Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| CodeIgniter is a PHP full-stack web framework A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server. Upgrade to v4.4.7 or later. | 7.5 |
Haute |
||
| CodeIgniter is a PHP full-stack web framework. Prior to CodeIgniter4 version 4.4.3, if an error or exception occurs, a detailed error report is displayed even if in the production environment. As a result, confidential information may be leaked. Version 4.4.3 contains a patch. As a workaround, replace `ini_set('display_errors', '0')` with `ini_set('display_errors', 'Off')` in `app/Config/Boot/production.php`. | 7.5 |
Haute |
||
| CodeIgniter is a PHP full-stack web framework. This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders. The vulnerability exists in the Validation library, and validation methods in the controller and in-model validation are also vulnerable because they use the Validation library internally. This issue is patched in version 4.3.5. | 9.8 |
Critique |
