Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Srtnlgn

#30506of 53,624
8.6Total CVSS
Vulnerabilities · 1
PT-2022-27784
8.6
2022-12-22
Unknown · Codeigniter · CVE-2022-46170
**Name of the Vulnerable Software and Affected Versions** CodeIgniter versions prior to 4.2.11 **Description** The issue arises when an application uses multiple session cookies and a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`. If an attacker obtains one session cookie, they may be able to access pages that require another session cookie. **Recommendations** For versions prior to 4.2.11, upgrade to version 4.2.11 or later. As a temporary workaround, consider using only one session cookie until the issue is resolved.