swoole

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

swoole records in CISA KEV

No swoole vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Swoole · all components

TI-2020-14863 CVE-2020-24275 · GHSA-v8cm-m69f-m8pg

HIGH 68

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0077 Published 2023-07-20 No fix listed CWE-74

TI-2018-11057 CVE-2018-15503 · GHSA-wp68-99q2-jm6p

LOW 37

The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02272 Published 2018-08-18 No fix listed CWE-502

TI-2019-11618 CVE-2019-15518 · GHSA-2v28-fx5v-7xvj

LOW 28

Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02019 Published 2019-08-23 No fix listed CWE-22