Threats tagged 'ghsa-hhmc-q9hp-r662'

CodeIgniter 4 versions prior to 4.7.4 have a path traversal vulnerability in the UploadedFile::move() method when called without a second argument. The method uses the client-provided filename without sanitization, allowing attackers to write files outside the intended directory by supplying filenames with path traversal sequences. The vulnerability is fixed in version 4.7.4, which sanitizes the default filename. Applications explicitly passing client filenames as the second argument remain responsible for sanitization.