Vulnerability of PHP software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information
The vulnerability exists in the PHP SPL component due to an incorrect definition of what happens after data structures are deallocated. This allows malicious actors who operate remotely to execute arbitrary code using a specially crafted string, thereby triggering the use of hash tables’...