logo

Database

Inappropriate coding practices In codeigniter4/framework

Description

CodeIgniter4 DoS Vulnerability

Impact

A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server.

Patches

Upgrade to v4.4.7 or later. See upgrading guide.

Workarounds

    Disabling Auto Routing prevents a known attack vector in the framework.

    Do not pass invalid values to the lang() function or Language class.

References

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions