netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-hwxf-qxj7-7rfj

Browse Source
This commit is contained in:
advisory-database[bot]
2023-10-30 15:22:47 +00:00
parent 737af7e451
commit 6d28c04b7a
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/10/GHSA-hwxf-qxj7-7rfj/GHSA-hwxf-qxj7-7rfj.json
+11 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hwxf-qxj7-7rfj",
"modified": "2023-10-30T15:18:56Z",
"modified": "2023-10-30T15:21:32Z",
"published": "2023-10-30T15:18:56Z",
"aliases": [
"CVE-2023-46240"
],
"summary": "Detailed Error Report is Displayed in Production Environment ",
"details": "### Impact\nIf an error or exception occurs, a detailed error report is displayed even if in the production environment. \nAs a result, confidential information may be leaked.\n\n### Patches\nUpgrade to v4.4.3 or later. See [upgrading guide](https://codeigniter4.github.io/userguide/installation/upgrade_443.html).\n\n### Workarounds\nReplace `ini_set('display_errors', '0')` with `ini_set('display_errors', 'Off')` in `app/Config/Boot/production.php`.\n\n### References\n- https://codeigniter4.github.io/userguide/general/errors.html#error-reporting\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [codeigniter4/CodeIgniter4](https://github.com/codeigniter4/CodeIgniter4/issues)\n* Email us at [SECURITY.md](https://github.com/codeigniter4/CodeIgniter4/blob/develop/SECURITY.md)\n",
"summary": "CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment ",
"details": "### Impact\nIf an error or exception occurs in CodeIgniter4 v4.4.2 and earlier, a detailed error report is displayed even if in the production environment. As a result, confidential information may be leaked.\n\n### Patches\nUpgrade to v4.4.3 or later. See [upgrading guide](https://codeigniter4.github.io/userguide/installation/upgrade_443.html).\n\n### Workarounds\nReplace `ini_set('display_errors', '0')` with `ini_set('display_errors', 'Off')` in `app/Config/Boot/production.php`.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [codeigniter4/CodeIgniter4](https://github.com/codeigniter4/CodeIgniter4/issues)\n* Email us at [SECURITY.md](https://github.com/codeigniter4/CodeIgniter4/blob/develop/SECURITY.md)",
"severity": [
{
"type": "CVSS_V3",
@@ -43,6 +43,14 @@
"type": "WEB",
"url": "https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-hwxf-qxj7-7rfj"
},
{
"type": "WEB",
"url": "https://github.com/codeigniter4/CodeIgniter4/commit/423569fc31e29f51635a2e59c89770333f0e7563"
},
{
"type": "WEB",
"url": "https://codeigniter4.github.io/userguide/general/errors.html#error-reporting"
},
{
"type": "PACKAGE",
"url": "https://github.com/codeigniter4/CodeIgniter4"