Lucene search
+L

1 matches found

OSV
OSV
added 2024/06/09 7:15 p.m.11 views

AZL-42439 CVE-2024-5585 affecting package php for versions less than 8.3.8-1

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...

8.8CVSS6.5AI score0.28807EPSS
SaveExploits3References1
Rows per page
Query Builder