Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-1316

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00076EPSS
Exploits0References3
OSV
OSV
added 2024/03/29 4:36 p.m.16 views

GHSA-39FP-MQMM-GXJ6 CodeIgniter4 DoS Vulnerability

Impact A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server. Patches Upgrade to v4.4.7 or later. See upgrading guide. Workarounds - Disabling Auto Routing prevents a known...

7.5CVSS7.3AI score0.00744EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/03/29 4:36 p.m.17 views

CodeIgniter4 DoS Vulnerability

Impact A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server. Patches Upgrade to v4.4.7 or later. See upgrading guide. Workarounds - Disabling Auto Routing prevents a known...

7.5CVSS7.3AI score0.00744EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.2 views

PT-2024-23125 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions prior to 4.4.7 Description: A vulnerability was found in the Language class that allowed DoS attacks, which can be exploited by an attacker to consume a large amount of memory on the server. Recommendations: Upgrade to...

7.5CVSS7.3AI score0.00744EPSS
Exploits0References10
OSV
OSV
added 2024/03/06 10:53 a.m.22 views

BIT-CODEIGNITER-2022-24712

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery CSRF protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for...

8.8CVSS7.7AI score0.00076EPSS
Exploits0References2
OSV
OSV
added 2022/03/01 9:47 p.m.34 views

GHSA-4V37-24GM-H554 Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

Impact This vulnerability might allow remote attackers to bypass the CodeIgniter4 CSRF protection mechanism. Patches Upgrade to v4.1.9 or later. Workarounds These are workarounds for this vulnerability, but you will still need to code as these after upgrading to v4.1.9. Otherwise, the CSRF...

6.3CVSS7.5AI score0.00076EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/03/01 9:47 p.m.42 views

Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

Impact This vulnerability might allow remote attackers to bypass the CodeIgniter4 CSRF protection mechanism. Patches Upgrade to v4.1.9 or later. Workarounds These are workarounds for this vulnerability, but you will still need to code as these after upgrading to v4.1.9. Otherwise, the CSRF...

8.8CVSS0.7AI score0.00076EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2022/02/28 4:15 p.m.15 views

CVE-2022-24712

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery CSRF protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for...

8.8CVSS0.00076EPSS
Exploits0References2
Prion
Prion
added 2022/02/28 4:15 p.m.11 views

Cross site request forgery (csrf)

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery CSRF protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for...

6.8CVSS9AI score0.00076EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/02/28 4:0 p.m.4 views

CVE-2022-24712 Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery CSRF protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for...

6.3CVSS9.1AI score0.00076EPSS
Exploits0References2
OSV
OSV
added 2022/02/28 4:0 p.m.20 views

CVE-2022-24712 Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery CSRF protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for...

6.3CVSS8.6AI score0.00076EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/02/28 4:0 p.m.16 views

CVE-2022-24712 Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery CSRF protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for...

6.3CVSS9.3AI score0.00076EPSS
Exploits0References2
Friends Of PHP
Friends Of PHP
added 2022/02/26 12:51 a.m.30 views

CVE-2022-24712: Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

Impact This vulnerability might allow remote attackers to bypass the CodeIgniter4 CSRF protection mechanism. Patches Upgrade to v4.1.9 or later. Workarounds These are workarounds for this vulnerability, but you will still need to code as these after upgrading to v4.1.9. Otherwise, the CSRF...

8.8CVSS7.5AI score0.00076EPSS
Exploits0Affected Software1
Rows per page
Query Builder