Security Advisory

CVE-2014-8684

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-19 19:00:00

Last updated 2024-08-06 13:26:02

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently conduct PHP object injection attacks by leveraging use of standard string comparison operators to compare cryptographic hashes.

← Browse all CVEs View on cve.org ↗