Vulnerabilities

TI-2024-19355 CVE-2024-29186 · GHSA-j4hq-f63x-f39r

Slow String Operations via MultiPart Requests in Event-Driven Functions

LOW 31

Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00669 Published 2024-03-22 Fixed in 2.1.17 CWE-400

TI-2024-16271 CVE-2024-24754 · GHSA-82vx-mm6r-gg8w

HIGH 75

Bref enable serverless PHP on AWS Lambda.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00618 Published 2024-02-01 Fixed in 2.1.13 CWE-436

TI-2024-16269 CVE-2024-24752 · GHSA-x4hh-frx8-98r5

MEDIUM 62

Bref enable serverless PHP on AWS Lambda.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0075 Published 2024-02-01 Fixed in 2.1.13 CWE-400

TI-2024-16270 CVE-2024-24753 · GHSA-99f9-gv72-fw9r

MEDIUM 62

Bref enable serverless PHP on AWS Lambda.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00426 Published 2024-02-01 Fixed in 2.1.13 CWE-436