Improper File Type Validation

codeigniter4/framework is vulnerable to Improper File Type Validation. The vulnerability is due to the extin upload validation rule validating the MIME-derived guessed file extension instead of the client-provided filename extension, which allows an attacker to upload a malicious executable file...