CVE:CVE-2022-35943
CNNVD:CNNVD-202208-2959
CodeIgniter Shield是CodeIgniter公司的CodeIgniter 4的身份验证和授权模块。
CodeIgniter Shield 存在跨站请求伪造漏洞。攻击者利用该漏洞绕过带有CodeIgniter护罩的机构。
solution:Upgrade codeigniter codeigniter to a higher version than 4.2.3,and avoid the version (,4.2.3); Upgrade codeigniter shield to a higher version than 1.0.0:beta,and avoid the version 1.0.0:beta