CVE-2020-10793

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>codeigniter</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>CodeIgniter through 4.0.0 allows remote attackers to gain privileges
	via a modified Email ID to the "Select Role of the User" page. NOTE: A
	contributor to the CodeIgniter framework argues that the issue should
	not be attributed to CodeIgniter. Furthermore, the blog post reference
	shows an unknown website built with the CodeIgniter framework but that
	CodeIgniter is not responsible for introducing this issue because the
	framework has never provided a login screen, nor any kind of login or
	user management facilities beyond a Session library. Also, another
	reporter indicates the issue is with a custom module/plugin to
	CodeIgniter, not CodeIgniter itself.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2020-10793</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2020-10793</url>
    </references>
    <dates>
      <discovery>2020-03-23</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>