|
1 | 1 | {
|
2 |
| - "lastUpdatedDate": "2025-06-19T02:52:14+0000", |
| 2 | + "lastUpdatedDate": "2025-06-19T13:38:57+0000", |
3 | 3 | "name": "PHP Version Audit",
|
4 | 4 | "website": "https://github.com/lightswitch05/php-version-audit",
|
5 | 5 | "licence": "https://github.com/lightswitch05/php-version-audit/blob/master/LICENSE",
|
|
4039 | 4039 | "id": "CVE-2024-1874",
|
4040 | 4040 | "baseScore": null,
|
4041 | 4041 | "publishedDate": "2024-04-29T04:15:00+0000",
|
4042 |
| - "lastModifiedDate": "2025-02-13T18:16:00+0000", |
| 4042 | + "lastModifiedDate": "2025-06-18T21:12:00+0000", |
4043 | 4043 | "description": "In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell."
|
4044 | 4044 | },
|
4045 | 4045 | "CVE-2024-2756": {
|
|
4053 | 4053 | "id": "CVE-2024-2757",
|
4054 | 4054 | "baseScore": null,
|
4055 | 4055 | "publishedDate": "2024-04-29T04:15:00+0000",
|
4056 |
| - "lastModifiedDate": "2025-02-13T18:17:00+0000", |
| 4056 | + "lastModifiedDate": "2025-06-18T21:11:00+0000", |
4057 | 4057 | "description": "In PHP 8.3.* before 8.3.5, function\u00a0mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function."
|
4058 | 4058 | },
|
4059 | 4059 | "CVE-2024-3096": {
|
4060 | 4060 | "id": "CVE-2024-3096",
|
4061 | 4061 | "baseScore": null,
|
4062 | 4062 | "publishedDate": "2024-04-29T04:15:00+0000",
|
4063 |
| - "lastModifiedDate": "2025-02-13T18:18:00+0000", |
| 4063 | + "lastModifiedDate": "2025-06-18T21:10:00+0000", |
4064 | 4064 | "description": "In PHP\u00a0 version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if\u00a0a password stored with password_hash() starts with a null byte (\\x00), testing a blank string as the password via password_verify() will incorrectly return true."
|
4065 | 4065 | },
|
4066 | 4066 | "CVE-2024-4577": {
|
|
0 commit comments