Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/11 1:53 p.m.11 views

BIT-LIBPHP-2020-7071 FILTER_VALIDATE_URL accepts URLs with invalid userinfo

In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filtervar$url, FILTERVALIDATEURL, PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL and produce wrong dat...

5.3CVSS7.3AI score0.02983EPSS
SaveExploits1References8
Rows per page
Query Builder