Launchpad.net

CVE 2018-12071

A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.

See the CVE page on Mitre.org for more details.

References