CVE-2017-1000247

British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws.

Date published : 2017-11-16

https://www.codeigniter.com/userguide3/changelog.html#version-3-1-4