https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:45:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-229969 EUVD-2026-229969 https://cve.radiocsirt.org/vuln/euvd-2026-229969 https://cve.radiocsirt.org/vuln/fkie_cve-2022-46170 <p>CodeIgniter is a PHP full-stack web framework. When an application uses (1) multiple session cookies (e.g., one for user pages and one for admin pages) and (2) a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`, then if an attacker gets one session cookie (e.g., one for user pages), they may be able to access pages that require another session cookie (e.g., for admin pages). This issue has been patched, please upgrade to version 4.2.11 or later. As a workaround, use only one session cookie.</p> <p>CodeIgniter is a PHP full-stack web framework. When an application uses (1) multiple session cookies (e.g., one for user pages and one for admin pages) and (2) a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`, then if an attacker gets one session cookie (e.g., one for user pages), they may be able to access pages that require another session cookie (e.g., for admin pages). This issue has been patched, please upgrade to version 4.2.11 or later. As a workaround, use only one session cookie.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-46170 https://cve.radiocsirt.org/vuln/ghsa-6cq5-8cj7-g558 <p><strong>Affected:</strong> Packagist: codeigniter4/framework</p> <p>### Impact When an application uses (1) multiple session cookies (e.g., one for user pages and one for admin pages) and (2) a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`, then if an attacker gets one session cookie (e.g., one for user pages), they may be able to access pages that require another session cookie (e.g., for admin pages).</p> <p>### Patches Upgrade to version 4.2.11 or later.</p> <p>### Workarounds - Use only one session cookie.</p> <p>### References - https://codeigniter4.github.io/userguide/libraries/sessions.html#session-drivers</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [codeigniter4/CodeIgniter4](https://github.com/codeigniter4/CodeIgniter4/issues) * Email us at [SECURITY.md](https://github.com/codeigniter4/CodeIgniter4/blob/develop/SECURITY.md)</p> <p><strong>Affected:</strong> Packagist: codeigniter4/framework</p> <p>### Impact When an application uses (1) multiple session cookies (e.g., one for user pages and one for admin pages) and (2) a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`, then if an attacker gets one session cookie (e.g., one for user pages), they may be able to access pages that require another session cookie (e.g., for admin pages).</p> <p>### Patches Upgrade to version 4.2.11 or later.</p> <p>### Workarounds - Use only one session cookie.</p> <p>### References - https://codeigniter4.github.io/userguide/libraries/sessions.html#session-drivers</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [codeigniter4/CodeIgniter4](https://github.com/codeigniter4/CodeIgniter4/issues) * Email us at [SECURITY.md](https://github.com/codeigniter4/CodeIgniter4/blob/develop/SECURITY.md)</p> https://cve.radiocsirt.org/vuln/ghsa-6cq5-8cj7-g558 https://cve.radiocsirt.org/vuln/gsd-2022-46170 gsd-2022-46170 https://cve.radiocsirt.org/vuln/gsd-2022-46170