CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2023-32692

CodeIgniter is a PHP full-stack web framework. This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders. The vulnerability exists in the Validation library, and validation methods in the controller and in-model validation are also vulnerable because they use the Validation library internally. This issue is patched in version 4.3.5.

Score
9.8 critical
Published
2023-05-30
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
www/codeignitercodeigniter3.1.13unaddressedports@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>codeigniter</name>
	<range><lt>4.3.5</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>CodeIgniter is a PHP full-stack web framework. This vulnerability
	allows attackers to execute arbitrary code when you use Validation
	Placeholders. The vulnerability exists in the Validation library, and
	validation methods in the controller and in-model validation are also
	vulnerable because they use the Validation library internally. This
	issue is patched in version 4.3.5.
</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2023-32692</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2023-32692</url>
    </references>
    <dates>
      <discovery>2023-05-30</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>