Количество 30
Количество 30
CVE-2024-5458
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.
CVE-2024-5458
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.
CVE-2024-5458
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.
CVE-2024-5458
Filter bypass in filter_var (FILTER_VALIDATE_URL)
CVE-2024-5458
In PHP versions8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before ...
SUSE-SU-2024:2039-1
Security update for php8
SUSE-SU-2024:2038-1
Security update for php8
SUSE-SU-2024:2027-1
Security update for php8
GHSA-w8qr-v226-r27w
Filter bypass in filter_var (FILTER_VALIDATE_URL)
BDU:2024-04846
Уязвимость функции filter_var интерпретатора языка программирования PHP, позволяющая нарушителю подменить URL-адреса с ошибочными данными
ROS-20240820-16
Уязвимость php 8.3
ROS-20240820-15
Уязвимость php 8.2
ROS-20240820-08
Уязвимость php 8.1
SUSE-SU-2024:2037-1
Security update for php7
ALT-PU-2024-8861
ALT-PU-2024-8861: package `php8.3` update to version 8.3.8-alt1
ALT-PU-2024-8859
ALT-PU-2024-8859: package `php8.2` update to version 8.2.20-alt1
ALT-PU-2024-8853
ALT-PU-2024-8853: package `php8.1` update to version 8.1.29-alt1
RLSA-2024:10951
Moderate: php:8.2 security update
RLSA-2024:10950
Moderate: php:8.1 security update
RLSA-2024:10949
Moderate: php:8.2 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-5458 In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly. | CVSS3: 5.3 | 12% Средний | больше 2 лет назад | |
CVE-2024-5458 In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly. | CVSS3: 5.3 | 12% Средний | почти 4 года назад | |
CVE-2024-5458 In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly. | CVSS3: 5.3 | 12% Средний | больше 2 лет назад | |
CVE-2024-5458 Filter bypass in filter_var (FILTER_VALIDATE_URL) | CVSS3: 5.3 | 12% Средний | 7 месяцев назад | |
CVE-2024-5458 In PHP versions8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before ... | CVSS3: 5.3 | 12% Средний | больше 2 лет назад | |
SUSE-SU-2024:2039-1 Security update for php8 | 12% Средний | больше 2 лет назад | ||
SUSE-SU-2024:2038-1 Security update for php8 | 12% Средний | больше 2 лет назад | ||
SUSE-SU-2024:2027-1 Security update for php8 | 12% Средний | больше 2 лет назад | ||
GHSA-w8qr-v226-r27w Filter bypass in filter_var (FILTER_VALIDATE_URL) | CVSS3: 5.3 | 12% Средний | больше 2 лет назад | |
BDU:2024-04846 Уязвимость функции filter_var интерпретатора языка программирования PHP, позволяющая нарушителю подменить URL-адреса с ошибочными данными | CVSS3: 5.3 | 12% Средний | больше 2 лет назад | |
ROS-20240820-16 Уязвимость php 8.3 | CVSS3: 5.3 | 12% Средний | около 2 лет назад | |
ROS-20240820-15 Уязвимость php 8.2 | CVSS3: 5.3 | 12% Средний | около 2 лет назад | |
ROS-20240820-08 Уязвимость php 8.1 | CVSS3: 5.3 | 12% Средний | около 2 лет назад | |
SUSE-SU-2024:2037-1 Security update for php7 | больше 2 лет назад | |||
ALT-PU-2024-8861 ALT-PU-2024-8861: package `php8.3` update to version 8.3.8-alt1 | CVSS3: 9.8 | больше 2 лет назад | ||
ALT-PU-2024-8859 ALT-PU-2024-8859: package `php8.2` update to version 8.2.20-alt1 | CVSS3: 9.8 | больше 2 лет назад | ||
ALT-PU-2024-8853 ALT-PU-2024-8853: package `php8.1` update to version 8.1.29-alt1 | CVSS3: 9.8 | больше 2 лет назад | ||
RLSA-2024:10951 Moderate: php:8.2 security update | почти 2 года назад | |||
RLSA-2024:10950 Moderate: php:8.1 security update | почти 2 года назад | |||
RLSA-2024:10949 Moderate: php:8.2 security update | почти 2 года назад |
Уязвимостей на страницу