CyberRota Analysis
AI-GeneratedApplications using CodeIgniter versions prior to 4.7.4 are vulnerable due to improper handling of the X-Forwarded-Proto and Front-End-Https headers, which can allow attackers to spoof secure requests. This vulnerability could lead to security-sensitive decisions being made based on incorrect assumptions about request security, particularly in configurations where the backend is accessible directly over HTTP or where reverse proxies improperly handle headers. Developers and system administrators utilizing affected versions should prioritize upgrading to version 4.7.4 to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure() trusted the X-Forwarded-Proto and Front-End-Https headers from any incoming request, allowing an attacker could spoof these headers and cause the application to incorrectly treat an HTTP request as secure. This may have impacted applications that rely on isSecure(), force_https(), forceGlobalSecureRequests, or similar logic to enforce HTTPS-only access or make security-sensitive decisions. Exploitability depends on deployment configuration. Applications are most exposed if the backend is reachable directly over HTTP, or if a reverse proxy/load balancer forwards client-supplied forwarding headers without stripping or overwriting them. This issue has been fixed in version 4.7.4.