GoogleOSV:BIT-PHP-2024-1874

HistoryMay 14, 2024 - 7:29 a.m.

BIT-php-2024-1874

2024-05-1407:29:52

Google

osv.dev

php

version 8

proc_open command

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

CPENameOperatorVersion
phpge8.1.0
phpge8.2.0
phpge8.3.0
phplt8.2.18
phplt8.1.28
phplt8.3.5

Name	Operator	Version
php	ge	8.1.0
php	ge	8.2.0
php	ge	8.3.0
php	lt	8.2.18
php	lt	8.1.28
php	lt	8.3.5

References

www.openwall.com/lists/oss-security/2024/04/12/11

github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7