6.5
Moyenne
CVE-2022-31629 In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a…
Description
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
Produits et versions touchés
Références
- bugs.php.net bugs.php.net
- FEDORA-2022-0b77fbd9e7 lists.fedoraproject.org
- FEDORA-2022-afdea1c747 lists.fedoraproject.org
- FEDORA-2022-f204e1d0ed lists.fedoraproject.org
- DSA-5277 www.debian.org
- GLSA-202211-03 security.gentoo.org
- security.netapp.com security.netapp.com
- [debian-lts-announce] 20221215 [SECURITY] [DLA 3243-1] php7.3 security update lists.debian.org
- FEDORA-2024-b46619f761 lists.fedoraproject.org
- FEDORA-2024-39d50cc975 lists.fedoraproject.org
- FEDORA-2024-5e8ae0def0 lists.fedoraproject.org
- [oss-security] 20240412 PHP security releases 8.1.28, 8.2.18, & 8.3.6 www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de PHP
Les 103 CVE de PHP →
CVE-2026-109619
RCE via stale global state
9.2
Critique
CVE-2026-109618
RCE via OOM corruption
9.2
Critique
CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a…
5.9
Moyenne
CVE-2026-91768
The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so…
6.5
Moyenne