What is GHSA-j9f9-8j39-4g97?

GHSA-j9f9-8j39-4g97 is a security advisory published by GitHub Security Advisories with High severity. CodeIgniter HTTP Header Injection

Which CVE IDs does GHSA-j9f9-8j39-4g97 cover?

GHSA-j9f9-8j39-4g97 covers the following CVE IDs: CVE-2017-1000247. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j9f9-8j39-4g97?

GHSA-j9f9-8j39-4g97 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-j9f9-8j39-4g97?

GHSA-j9f9-8j39-4g97 affects 1 product, including: composer/codeigniter4/framework:= 3.1.3.

GHSA-j9f9-8j39-4g97HighCVSS 7.5

CodeIgniter HTTP Header Injection

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2017-1000247 →

📋 Description

British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws.

🎯 Affected products1

composer/codeigniter4/framework:= 3.1.3

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2017-1000247
https://www.codeigniter.com/userguide3/changelog.html#version-3-1-4
https://github.com/advisories/GHSA-j9f9-8j39-4g97