GHSA-j9f9-8j39-4g97

Source

https://github.com/advisories/GHSA-j9f9-8j39-4g97

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-j9f9-8j39-4g97/GHSA-j9f9-8j39-4g97.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-j9f9-8j39-4g97

Aliases

CVE-2017-1000247

Published

2022-05-17T00:18:34Z

Modified

2024-04-24T18:29:05.895252Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

CodeIgniter HTTP Header Injection

Details

British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the setstatusheader() common function under Apache resulting in HTTP Header Injection flaws.

Database specific

{
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-20"
    ],
    "github_reviewed_at": "2024-04-24T17:59:16Z",
    "severity": "HIGH",
    "nvd_published_at": "2017-11-17T04:29:00Z"
}

References

Affected packages

Packagist / codeigniter4/framework

Package

Name: codeigniter4/framework
Purl: pkg:composer/codeigniter4/framework

Affected ranges

Type: ECOSYSTEM
Events: Introduced

3.1.3

Fixed

3.1.4

Affected versions

3.*

3.1.3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-j9f9-8j39-4g97/GHSA-j9f9-8j39-4g97.json"