Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
Patch
CVE-2026-63222 - Path traversal in CodeIgniter. UploadedFile::move() unsanitized filename lets attackers write outside intended directory. CVSS 7.5. Update to 4.7.4 immediately. #CVE #CodeIgniter #infosec #cvealert #cybersecurity #cybersecurityawareness #cybersecuritytips #cybersecuritynews #git #github #gitlab #redteam #blueteam #ethicalhacking #ethicalhacker #hacker https://www.valtersit.com/cve/CVE-2026-63222/
Post summary
CVE‑2026‑63222 is a path traversal flaw in CodeIgniter’s UploadedFile::move() that allows attackers to write files outside the intended directory, rated CVSS 7.5; users are urged to immediately update to version 4.7.4 to mitigate the vulnerability.
0000055
980 followersView on X