CVE-2023-46240

Summary

CVE-2023-46240 is a vulnerability affecting the CodeIgniter PHP web framework. In versions prior to 4.4.3, when an error or exception occurs, a detailed error report is shown, potentially exposing confidential information, even in a production environment. The recent release of version 4.4.3 includes a patch to rectify this issue. As a temporary solution, developers can modify the `app/Config/Boot/production.php` file by changing `ini_set('display_errors', '0')` to `ini_set('display_errors', 'Off')` to prevent error reports from being displayed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.