Skip to content
OpenAdvisories

Package · Packagist

codeigniter4/shield

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.0
    CVE-2023-48707

    Cleartext Storage of Sensitive Information in codeigniter4/shield

    CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication and in affected versions was stored in the database in cleartext form. If a malicious person somehow…

    codeigniter4 shield codeigniter4/shield Packagist
  • Medium 5.0
    CVE-2023-48708

    Insertion of Sensitive Information into Log in codeigniter4/shield

    CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful login attempts are recorded with the raw tokens stored in the log table. If a malicious person somehow views the data in the log table they c…

    codeigniter4 shield codeigniter4/shield Packagist
  • High 7.5
    CVE-2023-27580

    CodeIgniter Shield Password Shucking Vulnerability

    CodeIgniter Shield provides authentication and authorization for the CodeIgniter 4 PHP framework. An improper implementation was found in the password storage process. All hashed passwords stored in Shield v1.0.0-beta.3 or earlier are easier to crack than exp…

    codeigniter4 shield codeigniter4/shield Packagist
  • Medium 5.9
    CVE-2022-35943

    SameSite may allow cross-site request forgery (CSRF) protection to be bypassed

    Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow [SameSite Attackers](https://canitakeyoursubdomain.name/) to bypass the [CodeIgniter4 CSRF protection](https://codeigniter4.github.io/userguide/libraries/s…

    codeigniter4 shield codeigniter4/shield Packagist