PT-2023-32955 · Unknown · Codeigniter

🗓️ 19 Apr 2023 00:00:00Reported by Positive TechnologiesType

CodeIgniter versions prior to 4.5.8 have improper header validation, risking application errors or DoS attacks.

Reporter	Title	Published	Views	Family All 115
FreeBSD	mantis -- multiple vulnerabilities	14 Oct 202300:00	–	freebsd
FreeBSD	mediawiki -- multiple vulnerabilities	21 Apr 202300:00	–	freebsd
Circl	CVE-2023-29197	27 Oct 202317:00	–	circl
Circl	CVE-2025-24013	20 Jan 202516:01	–	circl
CNNVD	PSR-7 Message Implementation 安全漏洞	17 Apr 202300:00	–	cnnvd
CNNVD	CodeIgniter 安全漏洞	20 Jan 202500:00	–	cnnvd
CVE	CVE-2023-29197	17 Apr 202321:08	–	cve
CVE	CVE-2025-24013	20 Jan 202515:57	–	cve
Cvelist	CVE-2023-29197 Improper header name validation in guzzlehttp/psr7	17 Apr 202321:08	–	cvelist
Cvelist	CVE-2025-24013 CodeIgniter validation of header name and value	20 Jan 202515:57	–	cvelist

Source	Link
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2023-29197.yaml
github	www.github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-x5mq-jjr3-vmx6
github	www.github.com/codeigniter4/CodeIgniter4/commit/5f8aa24280fb09947897d6b322bf1f0e038b13b6
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/FJANWDXJZE5BGLN4MQ4FEHV5LJ6CMKQF
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-29197
osv	www.osv.dev/vulnerability/CVE-2025-24013
bdu	www.bdu.fstec.ru/vul/2025-01640
osv	www.osv.dev/vulnerability/GHSA-wxmh-65f7-jcvw
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-24013
osv	www.osv.dev/vulnerability/GHSA-x5mq-jjr3-vmx6

01 Aug 2025 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.3 - 7.5

EPSS0.04782

SSVC