Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0662

Опубликовано: 16 фев. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.28 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 8.1.0 (включая) до 8.1.16 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 8.2.0 (включая) до 8.2.3 (исключая)

EPSS

Процентиль: 44%
0.00218
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-400

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

CVSS3: 7.5
redhat
около 3 лет назад

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

CVSS3: 7.5
msrc
около 3 лет назад

DoS vulnerability when parsing multipart request body

CVSS3: 7.5
debian
около 3 лет назад

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3 ...

CVSS3: 7.5
github
около 3 лет назад

DoS vulnerability when parsing multipart request body

EPSS

Процентиль: 44%
0.00218
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-400