Executive brief
Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued
Affected products
- Packagist codeigniter4/framework
Junglewise Threat Intelligence
CVE-2022-39284: Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued
CVE-2022-39284 · Severity: low · CVSS 3.1 · Published 2022-10-06
Technologies: codeigniter4/framework (Packagist). Vendors: Packagist.
Related threats
- CodeIgniter CodeIgniter4 unrestricted file upload in is_image and mime_in rules
- CodeIgniter Path Traversal in UploadedFile move method
- CodeIgniter SQL injection in Query Builder deleteBatch
- CodeIgniter CodeIgniter4 header spoofing in IncomingRequest::isSecure
- CodeIgniter CodeIgniter4 file upload validation bypass in ext_in rule