cbcvebase.
CVE-2024-1874
published 2024-04-29

CVE-2024-1874: In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping…

critical9.4CVSS 3.1
AVNACLPRNUINSUCHIHAL
In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianphp7.4
debianphp8.2
fedoraprojectfedora
fedoraprojectfedora
msrcazl3_php_8.3.6-1_on_azure_linux_3.0
msrcazl3_php_8.3.8-1_on_azure_linux_3.0
msrcazure_linux_3.0_arm
msrcazure_linux_3.0_x64
msrccbl2_php_8.1.22-2_on_cbl_mariner_2.0
msrccbl2_php_8.1.28-1_on_cbl_mariner_2.0
msrccbl2_php_8.1.29-1_on_cbl_mariner_2.0
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64
phpphp>= 8.1.0 < 8.1.298.1.29
phpphp>= 8.1.0 < 8.1.288.1.28
phpphp>= 8.2.0 < 8.2.208.2.20
phpphp>= 8.2.0 < 8.2.188.2.18
phpphp>= 8.3.0 < 8.3.88.3.8
phpphp>= 8.3.0 < 8.3.58.3.5
php_groupphp>= 8.1.* < 8.1.298.1.29
php_groupphp>= 8.2.* < 8.2.208.2.20
php_groupphp>= 8.3.* < 8.3.88.3.8