Inappropriate coding practices In codeigniter4/framework
Description
CodeIgniter4 DoS Vulnerability
Impact
A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server.
Patches
Upgrade to v4.4.7 or later. See upgrading guide.
Workarounds
Disabling Auto Routing prevents a known attack vector in the framework.
Do not pass invalid values to the lang() function or Language class.
References
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
packagist | 4.4.7 |
Aliases
1. 2. 3. 4. 5.
References
1. 2.