Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2022-24711

Remote CLI Command Execution Vulnerability in CodeIgniter4

Description

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. Prior to version 4.1.9, an improper input validation vulnerability allows attackers to execute CLI routes via HTTP request. Version 4.1.9 contains a patch. There are currently no known workarounds for this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

codeigniter4 CodeIgniter4

  • < 4.1.9affected

References