CVE-2024-57071

CVE-2024-57071 affects php-parser v3.2.1 through a prototype pollution in the lib.combine function, enabling DoS with a crafted payload. Connected sources confirm the vulnerability and provide a workaround (disable lib.combine) while noting no public exploit details in the documents. Exploitation...

CVE-2024-57071

A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...