CVE-2025-24013

Summary

CVE-2025-24013 is a vulnerability affecting the CodeIgniter PHP web framework. Prior to version 4.5.8, CodeIgniter failed to validate headers properly in its name and value fields. An attacker could construct malformed headers using the Header class, which could disrupt application functionality. In extreme cases, these malformed requests might cause a Denial of Service (DoS) scenario if a web application firewall interprets them as malicious and blocks further communication with the application. CodeIgniter has addressed this issue in version 4.5.8 by implementing proper header validation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.