CVE-2025-24013
1 advisory.
Packagist/codeigniter4/framework CVE-2025-24013: medium 5.3
Missing validation of header name and value in codeigniter4/framework
Action: Upgrade codeigniter4/framework to 4.5.8 or later.
composer require codeigniter4/framework:4.5.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.8 | - |
Fixed versions
| 4.5.8 |
Sources
- osv: GHSA-x5mq-jjr3-vmx6
- https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-x5mq-jjr3-vmx6
- https://nvd.nist.gov/vuln/detail/CVE-2025-24013
- https://github.com/codeigniter4/CodeIgniter4/commit/5f8aa24280fb09947897d6b322bf1f0e038b13b6
- https://datatracker.ietf.org/doc/html/rfc7230#section-3.2
- https://github.com/advisories/GHSA-wxmh-65f7-jcvw
- https://github.com/codeigniter4/CodeIgniter4
CVE-2025-24013 · published · modified · JSON