13 matches found
K17457324: PHP vulnerability CVE-2020-7066
Security Advisory Description In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while using getheaders with user-supplied URL, if the URL contains zero \0 character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions...
5.3CVSS7.1AI score0.02767EPSS
SaveExploits1
20