Shield (Codeigniter4) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-11-24. Vendor: Codeigniter4.

CVEs of Shield

• CVE-2023-48708 - CVSS 6.5 (medium), 2023-11-24: CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful login attempts are recorded with the raw…
• CVE-2023-48707 - CVSS 6.5 (medium), 2023-11-24: CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication…
• CVE-2023-27580 - CVSS 7.5 (high), 2023-03-13: CodeIgniter Shield provides authentication and authorization for the CodeIgniter 4 PHP framework. An improper implementation was found in the password storage…
• CVE-2022-35943 - CVSS 8.8 (high), 2022-08-12: Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow [SameSite…