Lucene search
+L

1 matches found

OSV
OSV
added 2025/01/14 7:23 p.m.28 views

BIT-PHP-MIN-2020-7066 get_headers() silently truncates after a null byte

In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using getheaders with user-supplied URL, if the URL contains zero \0 character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the getheade...

5.3CVSS6.6AI score0.02767EPSS
SaveExploits1References9
Rows per page
Query Builder