Lucene search
PRIOn knowledge basePRION:CVE-2023-46240HistoryOct 31, 2023 - 4:15 p.m.
Code injection
2023-10-3116:15:00
PRIOn knowledge base
www.prio-n.com
1
code injection
codeigniter
php
full-stack web framework
error report
production environment
confidential information
patch
workaround
configuration
0.001 Low
EPSS
Percentile
28.1%
CodeIgniter is a PHP full-stack web framework. Prior to CodeIgniter4 version 4.4.3, if an error or exception occurs, a detailed error report is displayed even if in the production environment. As a result, confidential information may be leaked. Version 4.4.3 contains a patch. As a workaround, replace ini_set('display_errors', '0') with ini_set('display_errors', 'Off') in app/Config/Boot/production.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| codeigniter | lt | 4.4.3 |
Related
github
github
cve
cve
CVE-2023-46240
2023-10-31 16:15:09
osv
osv
CVE-2023-46240
2023-10-31 16:15:09
BIT-codeigniter-2023-46240
2024-03-06 10:50:56
nvd
nvd
CVE-2023-46240
2023-10-31 16:15:09
cvelist
cvelist
veracode
veracode
Information Disclosure
2023-10-31 12:24:42