Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0662

Опубликовано: 16 фев. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.28 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 8.1.0 (включая) до 8.1.16 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 8.2.0 (включая) до 8.2.3 (исключая)

EPSS

Процентиль: 29%
0.001
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-400

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 3 года назад

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

CVSS3: 7.5
redhat
почти 3 года назад

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

CVSS3: 7.5
msrc
почти 3 года назад

DoS vulnerability when parsing multipart request body

CVSS3: 7.5
debian
почти 3 года назад

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3 ...

CVSS3: 7.5
github
почти 3 года назад

DoS vulnerability when parsing multipart request body

EPSS

Процентиль: 29%
0.001
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-400