Skip to content
OpenAdvisories

Vendor

codeigniter4

21 known vulnerabilities.

Products

CodeIgniter4 17 shield 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.6
    CVE-2022-39284

    Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4

    CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `true` in `Config\Cookie` is not reflected in `set_cookie()` or `Response::setCookie()`. As a result cookie values are erroneously exposed to s…

    codeigniter4 CodeIgniter4 codeigniter4/framework Packagist