CVE-2022-24711
Remote CLI Command Execution Vulnerability in CodeIgniter4
概要
Remote CLI Command Execution Vulnerability in CodeIgniter4
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. Prior to version 4.1.9, an improper input validation vulnerability allows attackers to execute CLI routes via HTTP request. Version 4.1.9 contains a patch. There are currently no known workarounds for this vulnerability.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com