Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: PHP 8.1.30, 8.2.24, 8.3.12 Clear all filters
TI-2024-08379 CVE-2024-9026

PHP-FPM logs from children may be altered

Priority MEDIUM 49

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catch_workers_output = yes, it may be possible to pollute the fi…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00487 Published 2024-10-08 Partial fix · 8.1.30, 8.2.24 +1 CWE-117
TI-2024-08289 CVE-2024-8926

PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)

Priority MEDIUM 46

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-62…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03662 Published 2024-10-08 Fixed in 8.1.30, 8.2.24 +1 CWE-78
TI-2024-08288 CVE-2024-8925

Erroneous parsing of multipart form data

Priority MEDIUM 57

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00935 Published 2024-10-08 Partial fix · 8.1.30, 8.2.24 +1 CWE-444