Поиск уязвимостей
Количество 32
Количество 32
BDU:2024-10555
Уязвимость конфигурации request_fulluri интерпретатора языка программирования PHP, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling)
ROS-20250115-05
Множественные уязвимости PHP 8.3
ROS-20250115-04
Множественные уязвимости PHP 8.2
ROS-20250115-03
Множественные уязвимости PHP 8.1
ALT-PU-2024-18048
ALT-PU-2024-18048: package `php8.1-soap` update to version 8.1.31-alt1
ALT-PU-2024-18038
ALT-PU-2024-18038: package `php8.2-soap` update to version 8.2.26-alt1
ALT-PU-2024-17956
ALT-PU-2024-17956: package `php8.3-soap` update to version 8.3.14-alt1
ALT-PU-2024-17952
ALT-PU-2024-17952: package `php8.1-soap` update to version 8.1.31-alt1
ALT-PU-2024-17913
ALT-PU-2024-17913: package `php8.2-soap` update to version 8.2.26-alt1
ALT-PU-2024-16432
ALT-PU-2024-16432: package `php8.1` update to version 8.1.31-alt1
ALT-PU-2024-16421
ALT-PU-2024-16421: package `php8.2` update to version 8.2.26-alt1
ALT-PU-2024-16264
ALT-PU-2024-16264: package `php8.1` update to version 8.1.31-alt1
ALT-PU-2024-16262
ALT-PU-2024-16262: package `php8.2` update to version 8.2.26-alt1
ALT-PU-2024-16220
ALT-PU-2024-16220: package `php8.3` update to version 8.3.14-alt1
CVE-2024-11234
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.
CVE-2024-11234
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.
CVE-2024-11234
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.
CVE-2024-11234
Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before ...
GHSA-c5f2-jwm7-mmq2
Configuring a proxy in a stream context might allow for CRLF injection in URIs
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-10555 Уязвимость конфигурации request_fulluri интерпретатора языка программирования PHP, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling) | CVSS3: 4.8 | 1% Низкий | почти 2 года назад |
 | ROS-20250115-05 Множественные уязвимости PHP 8.3 | CVSS3: 9.8 | почти 2 года назад | |
| ROS-20250115-04 Множественные уязвимости PHP 8.2 | CVSS3: 9.8 | почти 2 года назад | |
| ROS-20250115-03 Множественные уязвимости PHP 8.1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-18048 ALT-PU-2024-18048: package `php8.1-soap` update to version 8.1.31-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-18038 ALT-PU-2024-18038: package `php8.2-soap` update to version 8.2.26-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-17956 ALT-PU-2024-17956: package `php8.3-soap` update to version 8.3.14-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-17952 ALT-PU-2024-17952: package `php8.1-soap` update to version 8.1.31-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-17913 ALT-PU-2024-17913: package `php8.2-soap` update to version 8.2.26-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-16432 ALT-PU-2024-16432: package `php8.1` update to version 8.1.31-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-16421 ALT-PU-2024-16421: package `php8.2` update to version 8.2.26-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-16264 ALT-PU-2024-16264: package `php8.1` update to version 8.1.31-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-16262 ALT-PU-2024-16262: package `php8.2` update to version 8.2.26-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-16220 ALT-PU-2024-16220: package `php8.3` update to version 8.3.14-alt1 | CVSS3: 9.8 | почти 2 года назад | |
 | CVE-2024-11234 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user. | CVSS3: 7.2 | 1% Низкий | почти 2 года назад |
 | CVE-2024-11234 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user. | CVSS3: 4.8 | 1% Низкий | почти 2 года назад |
 | CVE-2024-11234 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user. | CVSS3: 7.2 | 1% Низкий | почти 2 года назад |
 | CVE-2024-11234 Configuring a proxy in a stream context might allow for CRLF injection in URIs | CVSS3: 7.2 | 1% Низкий | почти 2 года назад |
| CVE-2024-11234 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before ... | CVSS3: 7.2 | 1% Низкий | почти 2 года назад |
| GHSA-c5f2-jwm7-mmq2 Configuring a proxy in a stream context might allow for CRLF injection in URIs | 1% Низкий | почти 2 года назад |
Уязвимостей на страницу