Lucene search

K

CVE-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

๐Ÿ—“๏ธย 09 Jun 2024ย 18:50:36Reported byย phpTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 71ย Views

PHP proc_open() command injection CVE-2024-5585

Show more
Related
Affected
Refs
[
  {
    "defaultStatus": "affected",
    "modules": [
      "proc_open"
    ],
    "platforms": [
      "Windows"
    ],
    "product": "PHP",
    "repo": "https://github.com/php/php-src",
    "vendor": "PHP Group",
    "versions": [
      {
        "lessThan": "8.1.29",
        "status": "affected",
        "version": "8.1.*",
        "versionType": "semver"
      },
      {
        "lessThan": "8.2.20",
        "status": "affected",
        "version": "8.2.*",
        "versionType": "semver"
      },
      {
        "lessThan": "8.3.8",
        "status": "affected",
        "version": "8.3.*",
        "versionType": "semver"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
09 Jun 2024 18:36Current
CVSS37.7
EPSS0.00328
71
.json
Report