In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-develUpgrade php-commonUpgrade php-dbaUpgrade php-pgsqlUpgrade php-intlUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-ffiUpgrade php-mysqlndUpgrade php-opcacheUpgrade apcu-panelUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-processUpgrade php-pecl-zipUpgrade libzipUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-bcmathUpgrade php-xmlUpgrade php-ldapUpgrade php-embeddedUpgrade phpUpgrade php-dbgUpgrade php-odbcUpgrade php-pecl-xdebug3Upgrade php-enchantUpgrade php-gmpUpgrade php-pearUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-fpm | Feb 22, 2023 | Sep 28, 2022 |
| Alpine Linux | — | Upgrade php81Upgrade php7Upgrade php8 | Aug 22, 2024 | Sep 28, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-embeddedUpgrade php-develUpgrade php-bcmathUpgrade php-dbgUpgrade php-cliUpgrade php-pgsqlUpgrade php-xmlUpgrade php-fpmUpgrade php-gmpUpgrade phpUpgrade php-sodiumUpgrade php-commonUpgrade php-enchantUpgrade php-ldapUpgrade php-odbcUpgrade php-pdoUpgrade php-gdUpgrade php-opcacheUpgrade php-debuginfoUpgrade php-soapUpgrade php-mysqlndUpgrade php-intlUpgrade php-dbaUpgrade php-snmpUpgrade php-mbstringUpgrade php-pspellUpgrade php-process | Sep 14, 2023 | Sep 28, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-dbaUpgrade php8.1-gmpUpgrade php8.1-commonUpgrade php8.1-enchantUpgrade php8.1-soapUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-ldapUpgrade php8.1-xmlUpgrade php8.1-ffiUpgrade php8.1-tidyUpgrade php8.1-embedded-debuginfoUpgrade php8.1-intlUpgrade php8.1-pdoUpgrade php8.1-process-debuginfoUpgrade php8.1-ldap-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-processUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-embeddedUpgrade php8.1Upgrade php8.1-common-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-dbgUpgrade php8.1-odbcUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-pgsqlUpgrade php8.1-cli-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-bcmathUpgrade php8.1-gdUpgrade php8.1-cliUpgrade php8.1-develUpgrade php8.1-fpmUpgrade php8.1-intl-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-mbstring | Feb 17, 2025 | Sep 29, 2022 |
| Centos_linux | — | Upgrade php-ffiUpgrade phpUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-enchantUpgrade php-dbgUpgrade php-pecl-rrd-debugsourceUpgrade php-soapUpgrade php-ldapUpgrade php-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-processUpgrade php-opcacheUpgrade php-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-ffi-debuginfoUpgrade php-gdUpgrade apcu-panelUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-tools-debuginfoUpgrade php-opcache-debuginfoUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade libzip-develUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade libzip-toolsUpgrade php-pecl-xdebug-debugsourceUpgrade php-embeddedUpgrade php-dba-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-cliUpgrade php-fpmUpgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-xmlUpgrade php-pdoUpgrade php-bcmathUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcuUpgrade php-mysqlnd-debuginfoUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade php-develUpgrade libzipUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-apcu-debuginfoUpgrade php-pearUpgrade php-gd-debuginfoUpgrade php-enchant-debuginfo | Feb 22, 2023 | Sep 28, 2022 |
| Debian | — | Upgrade php7.4 | Nov 15, 2022 | Sep 28, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Nov 23, 2022 | Sep 28, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-soapUpgrade php-odbcUpgrade php-ldapUpgrade php-commonUpgrade php-pdoUpgrade php-fpmUpgrade php-gdUpgrade php-cliUpgrade phpUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-processUpgrade php-xml | Feb 9, 2023 | Sep 28, 2022 |
| Oracle_linux | — | Upgrade php-bcmathUpgrade php-gmpUpgrade php-mbstringUpgrade php-pearUpgrade php-fpmUpgrade php-dbgUpgrade php-soapUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-commonUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade php-cliUpgrade apcu-panelUpgrade phpUpgrade php-processUpgrade php-mysqlndUpgrade php-intlUpgrade libzip-toolsUpgrade php-ffiUpgrade php-enchantUpgrade php-xmlUpgrade php-snmpUpgrade php-embeddedUpgrade php-opcacheUpgrade libzipUpgrade libzip-develUpgrade php-pecl-rrdUpgrade php-ldapUpgrade php-gd | Feb 23, 2023 | Sep 29, 2022 |
| Php | — | Upgrade to PHP version 8.0.24Upgrade to PHP version 8.1.11Upgrade to PHP version 7.4.31 | Nov 2, 2022 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade php-opcache-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebug3Upgrade php-pecl-apcu-develUpgrade php-pearUpgrade php-soapUpgrade php-fpmUpgrade php-debugsourceUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-opcacheUpgrade libzipUpgrade php-pecl-rrd-debuginfoUpgrade libzip-debugsourceUpgrade php-cliUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-jsonUpgrade php-mysqlndUpgrade php-pecl-rrd-debugsourceUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-gd-debuginfoUpgrade libzip-develUpgrade php-pecl-xdebug3-debugsourceUpgrade php-gdUpgrade php-pdoUpgrade php-pecl-zip-debugsourceUpgrade php-processUpgrade php-dbaUpgrade php-gmpUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade php-xmlUpgrade php-embedded-debuginfoUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-ffiUpgrade php-pecl-zip-debuginfoUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoNo solution existsUpgrade apcu-panelUpgrade php-ldapUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-intlUpgrade php-enchant-debuginfoUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade libzip-debuginfoUpgrade php-dbgUpgrade php-gmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pgsqlUpgrade php-cli-debuginfo | Feb 22, 2023 | Sep 28, 2022 |
| Rocky_linux | — | Upgrade php-dbgUpgrade php-mbstringUpgrade php-pecl-xdebug3-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-pecl-apcu-debugsourceUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug3Upgrade libzip-debuginfoUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-odbcUpgrade libzip-toolsUpgrade php-pecl-xdebug-debugsourceUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade php-debuginfoUpgrade php-enchant-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-develUpgrade php-commonUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-intlUpgrade php-gd-debuginfoUpgrade php-cliUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-apcu-develUpgrade php-ffi-debuginfoUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-pdoUpgrade php-embedded-debuginfoUpgrade php-soapUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlndUpgrade php-ldapUpgrade php-debugsourceUpgrade php-pecl-zipUpgrade php-develUpgrade php-gmp-debuginfoUpgrade php-fpmUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade libzipUpgrade php-gdUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-ffiUpgrade php-process-debuginfo | Mar 12, 2024 | Sep 28, 2022 |
| Suse | — | Upgrade php74-bz2Upgrade php8-embedUpgrade php81-mbstringUpgrade php81-domUpgrade php72-posixUpgrade php72-socketsUpgrade php8-soapUpgrade php74-gettextUpgrade php72-xslUpgrade php7-snmpUpgrade php8-xslUpgrade php81-enchantUpgrade php74-fileinfoUpgrade php8-sodiumUpgrade php7-wddxUpgrade php8-socketsUpgrade apache2-mod_php7Upgrade php7-fastcgiUpgrade php8-posixUpgrade php72-calendarUpgrade php72-fastcgiUpgrade php74-sqliteUpgrade php74-jsonUpgrade php8-exifUpgrade php72-jsonUpgrade php74-xmlwriterUpgrade php72-xmlreaderUpgrade php7-sysvmsgUpgrade php74-readlineUpgrade php74-gdUpgrade php81-testUpgrade php81-snmpUpgrade php8-sysvshmUpgrade php72-readlineUpgrade php74-sysvsemUpgrade php72-pharUpgrade php74-tidyUpgrade php7-ctypeUpgrade php7-enchantUpgrade php7-pgsqlUpgrade php74-curlUpgrade php7-curlUpgrade php7-pcntlUpgrade php74-pdoUpgrade php8-bcmathUpgrade php81-fastcgiUpgrade php7-calendarUpgrade php8-shmopUpgrade php8-pharUpgrade php8-xmlreaderUpgrade php72-dbaUpgrade php81-xslUpgrade php81-curlUpgrade php81-socketsUpgrade php81-bcmathUpgrade php74-pharUpgrade php74-opcacheUpgrade php81-sqliteUpgrade php8-snmpUpgrade php74-fpmUpgrade php72-imapUpgrade php72-pearUpgrade php72-intlUpgrade php81-exifUpgrade php74-sysvshmUpgrade php81-xmlreaderUpgrade php72-curlUpgrade php74-domUpgrade php72-pdoUpgrade php7-opcacheUpgrade php7-opensslUpgrade php81-bz2Upgrade php72-sysvmsgUpgrade php74-pgsqlUpgrade php74-develUpgrade php81Upgrade php72-zipUpgrade apache2-mod_php72Upgrade php74-shmopUpgrade php74-odbcUpgrade php74-fastcgiUpgrade php81-intlUpgrade php81-pdoUpgrade php72-domUpgrade php8-sqliteUpgrade php81-zipUpgrade php81-fpm-apacheUpgrade php8-bz2Upgrade php74-zipUpgrade php8-opcacheUpgrade php81-embedUpgrade php72-opcacheUpgrade apache2-mod_php74Upgrade php7-bcmathUpgrade php81-shmopUpgrade php72-ldapUpgrade php8-opensslUpgrade php72-shmopUpgrade php74-snmpUpgrade php8-gdUpgrade php74-tokenizerUpgrade php74-mysqlUpgrade php7-tokenizerUpgrade php8-calendarUpgrade php7-sysvsemUpgrade php72-develUpgrade php7-intlUpgrade php72-odbcUpgrade php81-tidyUpgrade php81-gmpUpgrade php8-intlUpgrade php72-opensslUpgrade php8-testUpgrade php72-tokenizerUpgrade php72-pspellUpgrade php81-fileinfoUpgrade php7-pharUpgrade php74-enchantUpgrade php81-xmlwriterUpgrade php8-mbstringUpgrade php72-mysqlUpgrade php72-fpmUpgrade php74Upgrade php7-xmlwriterUpgrade php81-soapUpgrade php74-pcntlUpgrade php7-fileinfoUpgrade php7-ftpUpgrade php81-zlibUpgrade php72-bz2Upgrade php81-posixUpgrade php72-soapUpgrade php7-iconvUpgrade php8-fastcgiUpgrade php74-sodiumUpgrade php8-enchantUpgrade php81-readlineUpgrade php72-sysvsemUpgrade php81-gdUpgrade php74-bcmathUpgrade php8-domUpgrade php81-sysvmsgUpgrade php72-sqliteUpgrade php74-iconvUpgrade php72-gmpUpgrade php7-gmpUpgrade php72-enchantUpgrade php8-readlineUpgrade php81-develUpgrade php7-develUpgrade apache2-mod_php8Upgrade php74-ctypeUpgrade php7-pdoUpgrade php74-ldapUpgrade php72Upgrade php72-bcmathUpgrade php72-exifUpgrade php7-sodiumUpgrade php72-pcntlUpgrade php8-ldapUpgrade php81-pharUpgrade php8-develUpgrade php7-gettextUpgrade php72-xmlrpcUpgrade php81-ctypeUpgrade php81-cliUpgrade php74-xmlreaderUpgrade php8-sysvsemUpgrade php8-gmpUpgrade php7-soapUpgrade php7-sqliteUpgrade php8-tidyUpgrade php7-fpmUpgrade php74-gmpUpgrade php7-cliUpgrade php81-sysvshmUpgrade php72-sysvshmUpgrade php7-shmopUpgrade php72-ctypeUpgrade php72-snmpUpgrade php72-pear-archive_tarUpgrade php72-fileinfoUpgrade php7-jsonUpgrade php72-gdUpgrade php74-calendarUpgrade php81-ldapUpgrade php81-iconvUpgrade php8-gettextUpgrade php72-sodiumUpgrade php8Upgrade php74-opensslUpgrade php81-pgsqlUpgrade php74-posixUpgrade php72-xmlwriterUpgrade php8-iconvUpgrade php81-odbcUpgrade php7-readlineUpgrade php7-mbstringUpgrade php7-embedUpgrade php7-tidyUpgrade php74-xslUpgrade php81-ftpUpgrade php74-soapUpgrade php72-wddxUpgrade php7-xmlrpcUpgrade php7-mysqlUpgrade php7-domUpgrade php72-tidyUpgrade php8-pdoUpgrade php8-zipUpgrade php8-tokenizerUpgrade php72-gettextUpgrade php7-testUpgrade php8-curlUpgrade php7-xslUpgrade php72-zlibUpgrade php81-gettextUpgrade php7-posixUpgrade php74-zlibUpgrade php8-dbaUpgrade php7-xmlreaderUpgrade php8-fpmUpgrade php81-opensslUpgrade php81-mysqlUpgrade php74-sysvmsgUpgrade php74-intlUpgrade php7-zlibUpgrade php7-pear-archive_tarUpgrade php7-pearUpgrade php7-exifUpgrade apache2-mod_php81Upgrade php7-gdUpgrade php7-sysvshmUpgrade php81-pcntlUpgrade php8-ctypeUpgrade php81-tokenizerUpgrade php81-fpmUpgrade php81-ffiUpgrade php8-zlibUpgrade php7-socketsUpgrade php8-xmlwriterUpgrade php8-mysqlUpgrade php74-socketsUpgrade php72-pgsqlUpgrade php74-mbstringUpgrade php8-pgsqlUpgrade php81-opcacheUpgrade php81-dbaUpgrade php74-xmlrpcUpgrade php81-calendarUpgrade php74-exifUpgrade php72-iconvUpgrade php7-zipUpgrade php7-ldapUpgrade php7-odbcUpgrade php7Upgrade php8-pcntlUpgrade php72-mbstringUpgrade php7-bz2Upgrade php74-ftpUpgrade php74-dbaUpgrade php72-ftpUpgrade php7-dbaUpgrade php8-cliUpgrade php81-sodiumUpgrade php81-sysvsemUpgrade php8-sysvmsgUpgrade php8-odbcUpgrade php8-ftpUpgrade php7-firebirdUpgrade php8-fileinfo | Oct 26, 2022 | Sep 28, 2022 |
| Ubuntu | — | Upgrade php7.0-zip (Ubuntu Pro)Upgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php7.2-cgiUpgrade php8.1-cgiUpgrade php8.1Upgrade php7.2-cliUpgrade php8.1-zipUpgrade php7.4-cliUpgrade php7.0-cli (Ubuntu Pro)Upgrade php7.2-zipUpgrade libapache2-mod-php8.1Upgrade php8.1-cliUpgrade php7.4-cgiUpgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php8.0Upgrade php7.2Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.4Upgrade php7.4-zip | Nov 9, 2022 | Sep 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub