Vulnerabilities

TI-2020-14863 CVE-2020-24275 · GHSA-v8cm-m69f-m8pg

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to…

HIGH 68

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0077 Published 2023-07-20 No fix listed CWE-74

TI-2019-11618 CVE-2019-15518 · GHSA-2v28-fx5v-7xvj

LOW 28

Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02019 Published 2019-08-23 No fix listed CWE-22

TI-2018-11057 CVE-2018-15503 · GHSA-wp68-99q2-jm6p

LOW 37

The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02272 Published 2018-08-18 No fix listed CWE-502