CVE-2023-48708

CVE-2023-48708 is a medium-severity vulnerability in CodeIgniter Shield, an authentication and authorization provider for CodeIgniter 4. It allows for the logging of raw authentication tokens during successful login attempts. An attacker with access to the log table could obtain these tokens, enabling them to impersonate users. The vulnerability has a CVSS score of 6.5, indicating a network-based attack with low complexity, requiring low privileges, and resulting in high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.