high7.5
CVE-2024-41344
A Cross-Site Request Forgery (CSRF) in Codeigniter 3.1.13 allows attackers to arbitrarily change the Administrator password and escalate privileges.
Impact
A Cross-Site Request Forgery (CSRF) in Codeigniter 3.1.13 allows attackers to arbitrarily change the Administrator password and escalate privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codeigniter | Codeigniter | Version 3.1.13 |