Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2020/04/01 3:35 a.m.36 views

CVE-2020-7066 get_headers() silently truncates after a null byte

In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using getheaders with user-supplied URL, if the URL contains zero \0 character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the getheade...

5.3CVSS6.8AI score0.02767EPSS
SaveExploits1References8
Rows per page
Query Builder