Skip to content
OpenAdvisories
High · 7.5 CVE-2024-29904 EUVD-2024-0802GHSA-39fp-mqmm-gxj6

CodeIgniter4 Language class DoS Vulnerability

Published Mar 29, 2024 · Updated Aug 21, 2024 · Assigned by GitHub_M

Description

CodeIgniter is a PHP full-stack web framework A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server. Upgrade to v4.4.7 or later.

Affected products

VendorProductAffectedFixed
codeigniter4 CodeIgniter4 < 4.4.7 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist codeigniter4/framework < 4.4.7 4.4.7 GHSA-39fp-mqmm-gxj6

References