Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/11/24 12:57 a.m.30 views

CVE-2024-11234 Configuring a proxy in a stream context might allow for CRLF injection in URIs

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, when using streams with configured proxy and "requestfulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests...

4.8CVSS0.01132EPSS
SaveExploits1References1
Rows per page
Query Builder