Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-m6m8-6gq8-c9fj: Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4

Impact

This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders.

The vulnerability exists in the Validation library, and validation methods in the controller and in-model validation are also vulnerable because they use the Validation library internally.

Patches

Upgrade to v4.3.5 or later.

Workarounds

Setting validation rules with an array.

E.g.:

$validation->setRules([
    'email' => ['required', 'valid_email, 'is_unique[users.email,id,{id}]'],
]);

References

  • https://codeigniter4.github.io/userguide/libraries/validation.html#validation-placeholders
  • https://codeigniter4.github.io/userguide/incoming/controllers.html#validating-data
  • https://codeigniter4.github.io/userguide/models/model.html#in-model-validation
ghsa
#vulnerability#git#php#rce

Package

composer codeigniter4/framework (Composer)

Affected versions

< 4.3.5

Patched versions

4.3.5

Description

Impact

This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders.

The vulnerability exists in the Validation library, and validation methods in the controller and in-model validation are also vulnerable because they use the Validation library internally.

Patches

Upgrade to v4.3.5 or later.

Workarounds

Setting validation rules with an array.

E.g.:

$validation->setRules([ ‘email’ => ['required’, 'valid_email, 'is_unique[users.email,id,{id}]'], ]);

References

  • https://codeigniter4.github.io/userguide/libraries/validation.html#validation-placeholders
  • https://codeigniter4.github.io/userguide/incoming/controllers.html#validating-data
  • https://codeigniter4.github.io/userguide/models/model.html#in-model-validation

References

  • GHSA-m6m8-6gq8-c9fj
  • codeigniter4/CodeIgniter4@6af6771
  • https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md#v435-2023-05-21

kenjis published to codeigniter4/CodeIgniter4

May 21, 2023

Published to the GitHub Advisory Database

May 22, 2023

Reviewed

May 22, 2023

Last updated

May 22, 2023

ghsa: Latest News

GHSA-6gf2-ffq8-gcww: GHSL-2024-288: SickChill open redirect in login