{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-11T01:13:52.359","vulnerabilities":[{"cve":{"id":"CVE-2023-48707","sourceIdentifier":"security-advisories@github.com","published":"2023-11-24T18:15:07.327","lastModified":"2024-11-21T08:32:18.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an important key for HMAC SHA256 authentication and in affected versions was stored in the database in cleartext form. If a malicious person somehow had access to the data in the database, they could use the key and secretKey for HMAC SHA256 authentication to send requests impersonating that corresponding user. This issue has been addressed in version 1.0.0-beta.8. Users are advised to upgrade. There are no known workarounds for this vulnerability."},{"lang":"es","value":"CodeIgniter Shield es un proveedor de autenticación y autorización para CodeIgniter 4. El valor `secretKey` es una clave importante para la autenticación HMAC SHA256 y en las versiones afectadas se almacenaba en la base de datos en forma de texto plano. Si una persona malintencionada de alguna manera tuviera acceso a los datos de la base de datos, podría usar la clave y la clave secreta para la autenticación HMAC SHA256 para enviar solicitudes haciéndose pasar por ese usuario correspondiente. Este problema se solucionó en la versión 1.0.0-beta.8. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.7,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeigniter:shield:1.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"B1E3F1E0-C2D7-4EC5-AD04-AEB414A3D71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeigniter:shield:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8DDA8B62-EE63-40C0-9F2C-23F56B225F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeigniter:shield:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"4F37B4E1-D641-4D55-9D3F-FB3B18934FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeigniter:shield:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"3361F9CD-A084-4437-BF22-08A558C326B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeigniter:shield:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"AEF20FB8-F114-4B54-8CEF-739433359E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeigniter:shield:1.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"340EBC7C-51FC-4792-A0A4-A323219D1551"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeigniter:shield:1.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"061CA3F7-EDAD-4D04-AFBC-9ABD22470AF1"}]}]}],"references":[{"url":"https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/codeigniter4/shield/security/advisories/GHSA-v427-c49j-8w6x","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/codeigniter4/shield/commit/f77c6ae20275ac1245330a2b9a523bf7e6f6202f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/codeigniter4/shield/security/advisories/GHSA-v427-c49j-8w6x","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}