{"error":0,"message":null,"data":{"php":"8.2","name":"PHP 8.2","status":"s","date_start":"2022-12-08","date_end":"2026-12-31","vulnerability":[{"uuid":"24f53b6f5e4f56b78c45cd99b73255b5d8f552a1ef5ee77d4384352f59118f9b","name":"PHP 8.2 < 8.2.9","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.9","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2023-3824","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-3824","description":"[en] In PHP version 8.0.* before 8.0.30,\u00a0 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.\u00a0","date":"2023-08-11"}]},{"uuid":"9fd8cf0535d3c00c38acb5fed6c9e1bedce12cbbd2648c187e32ebb0ccdbd37b","name":"PHP 8.2 < 8.2.9","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.9","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2023-3823","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-3823","description":"[en] In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling appropriate function. However, since the state is process-global, other modules - such as\u00a0ImageMagick - may also use this library within the same process, and change that global state for their internal purposes, and leave it in a state where external entities loading is enabled. This can lead to the situation where external XML is parsed with external entities loaded, which can lead to disclosure of any local files accessible to PHP. This vulnerable state may persist in the same process across many requests, until the process is shut down.\u00a0","date":"2023-08-11"}]},{"uuid":"58eb85a6ce99f8e9302bbee68218fba614e85eba347b965ef6ba0ee60045e8d5","name":"PHP 8.2 < 8.2.7","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.7","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2023-3247","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-3247","description":"[en] In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce.\u00a0","date":"2023-07-22"}]},{"uuid":"e668b8d27bf50201f643ac699ec1cd56ae188427aeed902adcc3da43b05dbd4d","name":"PHP 8.2 < 8.2.3","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.3","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2023-0662","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-0662","description":"[en] In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.\u00a0","date":"2023-02-16"}]},{"uuid":"107791b5286d55acd2a3fcea26e23e50c87c9380aebbc5fccab7f33abc59d64e","name":"PHP 8.2 < 8.2.3","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.3","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2023-0568","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-0568","description":"[en] In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.\u00a0","date":"2023-02-16"}]},{"uuid":"a2242fe77975693d33f09cf1bb9fdc9fd23f779b45eab8bcb60910a310bb06f3","name":"PHP 8.2 < 8.2.3","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.3","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2023-0567","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-0567","description":"[en] In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.\u00a0","date":"2023-02-16"}]},{"uuid":"98a5ea4446d2cefa09a154d2ab9b47a993a1f500b95a8128d5db8b433518b5b7","name":"PHP 8.2 < 8.2.0","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.0","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2022-37454","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2022-37454","description":"[en] The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.","date":"2022-10-21"}]},{"uuid":"03702e81ba01e3ea6de3a18a69479f9e40b9e8aeb5b325dfdf38041ef8a01b67","name":"PHP 8.2 < 8.2.1","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.1","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2022-31631","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2022-31631","description":"[en] In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.","date":"2025-02-12"}]},{"uuid":"d6db64fd34c3defa0c3312805151e0c77e97a13f9c8cf7ba7b976e6c1de8da27","name":"PHP 8.2 < 8.2.20","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.20","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-4577","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-4577","description":"[en] In PHP versions\u00a08.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use \"Best-Fit\" behavior to replace characters in command line given to\u00a0Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.","date":"2024-06-09"}]},{"uuid":"df9f21125a56b0d7b5aa32d2fc1a99553ab302f570b9c66287d2f7ba14eddd14","name":"PHP 8.2 < 8.2.20","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.20","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-5585","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-5585","description":"[en] In PHP versions\u00a08.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for\u00a0CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue:\u00a0when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.","date":"2024-06-09"}]},{"uuid":"e780aeab886ffbf2d101a498a81e0ed90f7ffffa8c96f1d68190cdddb6924881","name":"PHP 8.2 < 8.2.20","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.20","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-2408","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-2408","description":"[en] The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request:  https:\/\/github.com\/openssl\/openssl\/pull\/13817  (rsa_pkcs1_implicit_rejection). These changes are part of OpenSSL 3.2 and have also been backported to stable versions of various Linux distributions, as well as to the PHP builds provided for Windows since the previous release. All distributors and builders should ensure that this version is used to prevent PHP from being vulnerable.\n\nPHP Windows builds for the versions\u00a08.1.29,\u00a08.2.20 and\u00a08.3.8 and above include OpenSSL patches that fix the vulnerability.","date":"2024-06-09"}]},{"uuid":"1f1c44d6882f6aba8d4925c5f6e61b8f7f23b7dba3ebfc7e4d70093f241b8d14","name":"PHP 8.2 < 8.2.20","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.20","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-5458","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-5458","description":"[en] In PHP versions\u00a08.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs\u00a0(FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.","date":"2024-06-09"}]},{"uuid":"18ba0d2dd4a930d0b645ef686af351c1cf9e9ca830e734f44111b807760019a3","name":"PHP 8.2 < 8.2.24","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.24","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-8926","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-8926","description":"[en] In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12,\u00a0when using a certain non-standard configurations of Windows codepages, the fixes for\u00a0 CVE-2024-4577 https:\/\/github.com\/advisories\/GHSA-vxpp-6299-mxw3 \u00a0may still be bypassed and the same command injection related to Windows \"Best Fit\" codepage behavior can be achieved. This\u00a0may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.","date":"2024-10-08"}]},{"uuid":"9d5468d4308b7b7fb75f369a47f3d686e7bbcf47e7def2b4e70060aa8122d82a","name":"PHP 8.2 < 8.2.24","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.24","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-8927","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-8927","description":"[en] In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12,\u00a0HTTP_REDIRECT_STATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in certain scenarios, the content of this variable can be controlled by the request submitter via HTTP headers, which can lead to\u00a0cgi.force_redirect option not being correctly applied. In certain configurations this may lead to arbitrary file inclusion in PHP.","date":"2024-10-08"}]},{"uuid":"77e90297ea5f81df7cffaab10d38bb2bfb83a801ebefee8f8ad316519976bf87","name":"PHP 8.2 < 8.2.24","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.24","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-8925","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-8925","description":"[en] In PHP versions\u00a08.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to exclude portion of other data, potentially leading to erroneous application behavior.","date":"2024-10-08"}]},{"uuid":"90675579ae400f37b3d3924d431e562a6ca8808a9fa28f535ca7757f5d42f645","name":"PHP 8.2 < 8.2.24","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.24","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-9026","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-9026","description":"[en] In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is\u00a0configured to catch workers output through catch_workers_output = yes,\u00a0it may be possible to pollute the final log or\u00a0remove up to 4 characters from the log messages by manipulating log message content. Additionally, if\u00a0PHP-FPM is configured to use syslog output, it may be possible to further remove log data using the same vulnerability.","date":"2024-10-08"}]},{"uuid":"0d4c97b5106b2433b71503a87ea16ae45c94cb74af41d2a3ccae9c931e0bcb9a","name":"PHP 8.2 < 8.2.26","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.26","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-11236","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-11236","description":"[en] In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.","date":"2024-11-24"}]},{"uuid":"9f5812bb2110ad4abf02fef1708156f5587e5370e11c0be65ec49fd82c8478ff","name":"PHP 8.2 < 8.2.26","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.26","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-11233","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-11233","description":"[en] In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in\u00a0convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.","date":"2024-11-24"}]},{"uuid":"8dcd7ce072b0b4091399399c352542de6920304ff263daf6800c8c44b6469298","name":"PHP 8.2 < 8.2.26","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.26","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-11234","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-11234","description":"[en] In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and \"request_fulluri\" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.","date":"2024-11-24"}]},{"uuid":"8d3cdd97f6bdd00f5715b28a91252854032ef9e1a030f80f487017500bdeeb94","name":"PHP 8.2 < 8.2.28","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.28","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2025-1219","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-1219","description":"CVE-2025-1219","date":"2025-01-01"}]},{"uuid":"c75ce81b0b9799dff4f59316903c2e363f9c820f7f5e368599bfdab78e2569dd","name":"PHP 8.2 < 8.2.28","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.28","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2025-1736","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-1736","description":"CVE-2025-1736","date":"2025-01-01"}]},{"uuid":"2f5a635c10867b64fb2f5df4a3baa78012f57c207b1ad012baabbff0ae2e18f9","name":"PHP 8.2 < 8.2.28","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.28","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2025-1861","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-1861","description":"CVE-2025-1861","date":"2025-01-01"}]},{"uuid":"d564443016006db71fd1dfd61207f7ebfa398549354d96b1e3290652dc0bd578","name":"PHP 8.2 < 8.2.28","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.28","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2025-1734","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-1734","description":"CVE-2025-1734","date":"2025-01-01"}]},{"uuid":"3e807475a7598ac09bd078b302dd5fa5602d7a01fc0316dfe6396c5ca20b43fe","name":"PHP 8.2 < 8.2.28","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.28","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2025-1217","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-1217","description":"CVE-2025-1217","date":"2025-01-01"}]},{"uuid":"5d1ba3e540dd7d641d0ce349cab9b77f6f5f436ce6b17f7becc850d90a565c7e","name":"PHP 8.2 < 8.2.26","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.26","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-8932","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-8932","description":"[en] In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.","date":"2024-11-22"}]},{"uuid":"6ed119185c3c64d4fff79dd95f5caa81d97fa728f54b441a8d346dc5d849e0e8","name":"PHP 8.2 < 8.2.26","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.26","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-8929","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-8929","description":"[en] In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.","date":"2024-11-22"}]},{"uuid":"e1c616f72295614be4c9c029b5294e2a05dde72cefe23f307c51721f63da1cdc","name":"PHP 8.2 < 8.2.20","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.20","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-1874","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-1874","description":"[en] In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.\u00a0","date":"2024-04-29"}]},{"uuid":"571a4c422d032c48539aa04c06c9afd63dec30e17ba0eb200881260926754982","name":"PHP 8.2 < 8.2.18","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.18","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-2756","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-2756","description":"[en] Due to an incomplete fix to  CVE-2022-31629 https:\/\/github.com\/advisories\/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host-\u00a0or __Secure-\u00a0cookie by PHP applications.\u00a0","date":"2024-04-29"}]},{"uuid":"034b14c563a945a215497dff27b1d2bfa0fa28cbd695ce942a6e49901071a327","name":"PHP 8.2 < 8.2.18","operator":{"min_version":null,"min_operator":null,"max_version":"8.2.18","max_operator":"lt","unfixed":0},"source":[{"id":"CVE-2024-3096","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-3096","description":"[en] In PHP\u00a0 version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if\u00a0a password stored with password_hash() starts with a null byte (\\x00), testing a blank string as the password via password_verify() will incorrectly return true.","date":"2024-04-29"}]}]},"updated":1775818983}