Medium severity · published Nov 24, 2023
CVE-2023-48708
Insertion of Sensitive Information into Log in codeigniter4/shield
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful login attempts are recorded with the raw tokens stored in the log table. If a malicious person somehow views the data in the log table they can obtain a raw token which can then be used to send a request with that user's authority. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. Users unable to upgrade should disable logging for successful login attempts by the configuration files.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
shield · codeigniter4
< 1.0.0-beta.8 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-48708
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-48708
Product
https://codeigniter4.github.io/shield/getting_started/authenticators/
Patch
https://github.com/codeigniter4/shield/commit/7e84c3fb3411294f70890819bfe51781bb9dc8e4
Mitigation
https://github.com/codeigniter4/shield/security/advisories/GHSA-j72f-h752-mx4w
More from shield
6.5
CVE-2023-48707
Cleartext Storage of Sensitive Information in codeigniter4/shield
5.9
CVE-2023-27580
CodeIgniter Shield Password Shucking Vulnerability