CVE-2022-24711
Remote CLI Command Execution Vulnerability in CodeIgniter4
Résumé
Remote CLI Command Execution Vulnerability in CodeIgniter4
Description d'origine
La description telle que publiée par la source (souvent en anglais).
CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. Prior to version 4.1.9, an improper input validation vulnerability allows attackers to execute CLI routes via HTTP request. Version 4.1.9 contains a patch. There are currently no known workarounds for this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com