Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2022-31629

Опубликовано: 01 окт. 2025
Источник: msrc
CVSS3: 6.5
EPSS Средний

Описание

$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

EPSS

Процентиль: 96%
0.25608
Средний

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 3 лет назад

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

CVSS3: 6.5
redhat
около 3 лет назад

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

CVSS3: 6.5
nvd
около 3 лет назад

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

CVSS3: 6.5
debian
около 3 лет назад

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability en ...

CVSS3: 6.5
redos
больше 1 года назад

Уязвимость php

EPSS

Процентиль: 96%
0.25608
Средний

6.5 Medium

CVSS3