CVE-2022-46170

Packagist/codeigniter4/framework CVE-2022-46170: high 8.6

CodeIgniter4 Potential Session Handlers Vulnerability

Action: Upgrade codeigniter4/framework to 4.2.11 or later.

composer require codeigniter4/framework:4.2.11

Affected

Fixed versions

Sources

• osv: GHSA-6cq5-8cj7-g558
• https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-6cq5-8cj7-g558
• https://nvd.nist.gov/vuln/detail/CVE-2022-46170
• https://github.com/codeigniter4/CodeIgniter4/commit/f9fb6574fbeb5a4aa63f7ea87296523e10db9328
• https://codeigniter4.github.io/userguide/libraries/sessions.html#session-drivers
• https://github.com/FriendsOfPHP/security-advisories/blob/master/codeigniter4/framework/CVE-2022-46170.yaml
• https://github.com/codeigniter4/CodeIgniter4

CVE-2022-46170 · published 2022-12-22T20:01:18Z · modified 2023-12-06T01:02:43.191201Z · JSON