Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4

CVE-2023-32692

Affected version: <4.3.5

Reported by:
GitHub

CVE-2022-46170: Potential Session Handlers Vulnerability

CVE-2022-46170

Affected version: <4.2.11

Reported by:
FriendsOfPHP/security-advisories, GitHub

CVE-2022-23556: Attackers may spoof IP address when using proxy

CVE-2022-23556

Affected version: <4.2.11

Reported by:
FriendsOfPHP/security-advisories, GitHub

CVE-2022-39284: Config\Cookie Secure or HttpOnly flag not set in CodeIgniter4

CVE-2022-39284

Affected version: <4.2.7

Reported by:
FriendsOfPHP/security-advisories, GitHub

CVE-2022-24711: Remote CLI Command Execution Vulnerability in CodeIgniter4

CVE-2022-24711

Affected version: <4.1.9

Reported by:
FriendsOfPHP/security-advisories, GitHub

CVE-2022-24712: Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

CVE-2022-24712

Affected version: <4.1.9

Reported by:
FriendsOfPHP/security-advisories, GitHub

CVE-2022-21715: XSS Vulnerability in API\ResponseTrait in CodeIgniter4

CVE-2022-21715

Affected version: <4.1.8

Reported by:
FriendsOfPHP/security-advisories, GitHub

CVE-2022-21647: Deserialization of Untrusted Data in Codeigniter4

CVE-2022-21647

Affected version: <4.1.6

Reported by:
FriendsOfPHP/security-advisories, GitHub