Start your free trial today.
Protect your organization with cutting-edge cybersecurity solutions designed for resilience and efficiency. Secure your digital assets with confidence.
Your Shield Against Threats
Unleash the Power of Cybersecurity
Boost Your Security, Enhance Your Business
We solve Your Cyber Challenges
Quick Links
Resources
Deepaegis Portals
2025 Deepaegis. All Rights Reserved.
A command injection vulnerability exists in CodeIgniter versions prior to 4.6.2. It affects systems using the ImageMagick (imagick) handler for image processing
Attackers can execute arbitrary system commands on the server by uploading specially crafted files or injecting malicious text strings, potentially leading to full system compromise.
CodeIgniter 4
Affected Version: v4.6.2
Remediation: Upgrade to CodeIgniter v4.6.2 or later.
Patched in CodeIgniter v4.6.2
Switch to GD handler or sanitize input.
Do not use user-controlled filenames directly
Monitor for use of imagick with user-controlled inputs, unusual file uploads, and system command executions linked to image processing tasks.
Not specified
Not specified
No references provided
No affected organizations specified
This document contains sensitive information. Unauthorized distribution is prohibited.