CodeIgniter Framework File Upload Validation Bypass Under Investigation
An early warning has been issued regarding a potential vulnerability in the CodeIgniter framework that may allow remote code execution through bypassing file upload validations.
What happened
The CodeIgniter framework is under investigation for a vulnerability in its file upload validation mechanism. This issue reportedly affects applications that use the `is_image` or `mime_in` validation rules without an additional check for safe file extensions. Such configurations may be susceptible to remote code execution attacks.
Affected versions include `composer/codeigniter4/framework` (packagist) prior to 4.7.4. It is recommended to upgrade to CodeIgniter v4.7.4 or later to mitigate this vulnerability. Engineers using CodeIgniter should review their application's file upload validation logic and ensure that safe extension checks are in place.
For more detailed information, consult the primary sources: [GHSA-c9w5-rwh3-7pm9](https://github.com/advisories/GHSA-c9w5-rwh3-7pm9) and [GHSA-mmj4-63m4-r6h5](https://github.com/advisories/GHSA-mmj4-63m4-r6h5). The situation is still under investigation, and further updates may be forthcoming.
How 0Day mitigates this
composer/codeigniter4/framework is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.