CVE-2023-0567

CVE-2023-0567 affects PHP: 8.0.x before 8.0.28, 8.1.x before 8.1.16, and 8.2.x before 8.2.3. The password_verify() function may treat certain invalid Blowfish hashes as valid, potentially allowing unintended access if such a hash is stored in the password database. Connections in the provided doc...