Bitnami codeigniter

Name: Bitnami codeigniter
Brand: Bitnami

productUS

pkg:bitnami/codeigniter

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

16critical5high2medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-32692US	critical9.8	1.13% (66th)	Exploit	4.3.5	2023-05-30	< 4.3.5
CVE-2022-21647US	critical9.8	37.7% (99th)	—	4.1.6	2022-01-04	4.0.0 → 4.1.6
CVE-2020-10793US	high8.8	1.90% (80th)	—	4.0.0	2020-03-23	< 4.0.0
CVE-2022-24711US	critical9.8	1.17% (67th)	—	4.1.9	2022-02-28	4.0.0 → 4.1.9
CVE-2022-39284US	medium4.3	1.12% (66th)	—	4.2.7	2022-10-06	4.0.0 → 4.2.7
CVE-2022-40835US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40834US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40833US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40832US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40831US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40830US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40829US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40828US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40826US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40825US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40824US	critical9.8	1.09% (65th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-40827US	critical9.8	1.04% (64th)	—	3.1.13	2022-10-07	5 versions
CVE-2022-21715US	medium6.1	1.00% (63rd)	—	4.1.8	2022-01-24	4.0.0 → 4.1.8
CVE-2022-46170US	critical9.8	0.91% (60th)	—	4.2.11	2022-12-22	4.0.0 → 4.2.11
CVE-2023-46240US	high7.5	0.62% (50th)	—	4.4.3	2023-10-31	< 4.4.3
CVE-2022-35943US	high8.8	0.59% (48th)	—	4.2.3	2022-08-12	< 4.2.3
CVE-2022-24712US	high8.8	0.56% (47th)	—	4.1.9	2022-02-28	4.0.0 → 4.1.9
CVE-2022-23556US	high7.5OT elevated	0.40% (34th)	—	4.2.11	2022-12-22	4.0.0 → 4.2.11

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')12 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-345Insufficient Verification of Data Authenticity1 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan