Skip to content
OpenAdvisories

Product · codeigniter4

shield

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.0
    CVE-2023-48707

    Cleartext Storage of Sensitive Information in codeigniter4/shield

    CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication and in affected versions was stored in the database in cleartext form. If a malicious person somehow…

    codeigniter4 shield codeigniter4/shield Packagist
  • Medium 5.0
    CVE-2023-48708

    Insertion of Sensitive Information into Log in codeigniter4/shield

    CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful login attempts are recorded with the raw tokens stored in the log table. If a malicious person somehow views the data in the log table they c…

    codeigniter4 shield codeigniter4/shield Packagist
  • Medium 5.9
    CVE-2022-35943

    SameSite may allow cross-site request forgery (CSRF) protection to be bypassed

    Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow [SameSite Attackers](https://canitakeyoursubdomain.name/) to bypass the [CodeIgniter4 CSRF protection](https://codeigniter4.github.io/userguide/libraries/s…

    codeigniter4 shield codeigniter4/shield Packagist