Lucene search
+L

1 matches found

osv-bit
osv-bit
•added 2025/08/11 1:53 p.m.•13 views

BIT-LIBPHP-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a Host- or Secure- cookie by PHP applications...

6.5CVSS7.1AI score0.49569EPSS
SaveExploits2References15
Rows per page
Query Builder