CVE-2023-48707

CVE-2023-48707 is a medium-severity vulnerability affecting CodeIgniter Shield, an authentication and authorization provider for CodeIgniter 4. The vulnerability stems from the cleartext storage of the ‘secretKey’ value in the database, which is critical for HMAC SHA256 authentication. An attacker with database access could leverage this key to impersonate users, leading to high confidentiality impact. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.