In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-soapUpgrade php-intlUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-bcmathUpgrade libzipUpgrade phpUpgrade php-embeddedUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade apcu-panelUpgrade php-pdoUpgrade php-dbgUpgrade php-fpmUpgrade php-jsonUpgrade php-develUpgrade php-gdUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade php-cliUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-odbcUpgrade php-processUpgrade php-dbaUpgrade php-xmlUpgrade libzip-develUpgrade php-ffiUpgrade libzip-toolsUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-pearUpgrade php-common | May 13, 2022 | Oct 2, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Oct 2, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Jul 17, 2021 | Oct 2, 2020 |
| Centos_linux | — | Upgrade php-process-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-xmlUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-pecl-rrd-debuginfoUpgrade php-processUpgrade php-json-debuginfoUpgrade php-pecl-rrdUpgrade php-debuginfoUpgrade php-pearUpgrade php-pdo-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-toolsUpgrade php-snmpUpgrade php-cli-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsqlUpgrade libzip-debuginfoUpgrade php-dbg-debuginfoUpgrade php-odbcUpgrade libzip-develUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-dba-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-opcache-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmathUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-develUpgrade php-dbgUpgrade phpUpgrade php-mysqlndUpgrade php-jsonUpgrade php-embeddedUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-rrd-debugsourceUpgrade php-fpm-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-develUpgrade php-gd-debuginfoUpgrade php-fpmUpgrade php-pgsql-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-ldapUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade libzipUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-gmpUpgrade php-ffiUpgrade php-gmp-debuginfoUpgrade apcu-panelUpgrade php-soapUpgrade php-ffi-debuginfo | Nov 10, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade php7.4 | Oct 8, 2020 | Oct 2, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Dec 29, 2020 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-gdUpgrade php-ldapUpgrade php-soapUpgrade php-odbcUpgrade php-pdoUpgrade php-commonUpgrade php-fpmUpgrade php-recodeUpgrade php-xmlUpgrade php-processUpgrade phpUpgrade php-xmlrpcUpgrade php-cli | Nov 3, 2020 | Oct 2, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.23-11.4.28.0.1.82.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.11-11.4.28.0.1.82.2 on Solaris 11.4 | Jan 19, 2021 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade php-pecl-apcuUpgrade php-gdUpgrade php-ffiUpgrade php-intlUpgrade php-dbgUpgrade php-embeddedUpgrade php-snmpUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-opcacheUpgrade apcu-panelUpgrade php-cliUpgrade php-enchantUpgrade libzipUpgrade libzip-toolsUpgrade phpUpgrade php-xmlUpgrade php-bcmathUpgrade php-dbaUpgrade libzip-develUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-pdoUpgrade php-develUpgrade php-fpmUpgrade php-pgsqlUpgrade php-gmpUpgrade php-processUpgrade php-pearUpgrade php-odbcUpgrade php-mbstringUpgrade php-common | Nov 17, 2021 | Jun 14, 2020 |
| Php | — | Upgrade to PHP version 7.4.11Upgrade to PHP version 7.2.34Upgrade to PHP version 7.3.23 | Oct 20, 2020 | Oct 2, 2020 |
| Redhat_linux | — | Upgrade php-process-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade php-pecl-zip-debugsourceUpgrade php-embeddedUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-fpmUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gmpUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-cliUpgrade libzip-tools-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-mysqlndUpgrade php-cli-debuginfoUpgrade phpUpgrade php-dbaUpgrade libzipUpgrade apcu-panelUpgrade php-bcmathUpgrade php-pecl-rrd-debugsourceUpgrade php-processUpgrade php-pecl-xdebug-debuginfoUpgrade php-gd-debuginfoUpgrade php-soapUpgrade php-ldapUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-pecl-zipUpgrade php-develUpgrade libzip-debugsourceUpgrade php-pdoUpgrade php-ffiUpgrade php-opcacheUpgrade php-jsonUpgrade php-pearUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-mysqlnd-debuginfoUpgrade libzip-toolsUpgrade php-pecl-rrd-debuginfoUpgrade php-odbcUpgrade php-dbgUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-odbc-debuginfoNo solution existsUpgrade php-pecl-zip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsqlUpgrade php-debuginfoUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-xml-debuginfoUpgrade php-snmpUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-mbstring | Nov 10, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade php-ldap-debuginfoUpgrade php-gmpUpgrade php-jsonUpgrade php-cli-debuginfoUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-json-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade php-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-odbc-debuginfoUpgrade php-process-debuginfoUpgrade php-fpmUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-develUpgrade libzip-toolsUpgrade libzipUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade libzip-develUpgrade php-snmpUpgrade php-intlUpgrade php-ffiUpgrade php-debugsourceUpgrade libzip-tools-debuginfoUpgrade libzip-debugsourceUpgrade php-processUpgrade php-soapUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soap-debuginfoUpgrade php-mysqlndUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade php-dbaUpgrade php-ldapUpgrade php-gdUpgrade php-ffi-debuginfoUpgrade php-cliUpgrade php-bcmath-debuginfoUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pdoUpgrade php-gmp-debuginfoUpgrade php-xmlUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-bcmath | Mar 12, 2024 | Oct 2, 2020 |
| Suse | — | Upgrade php5-fpmUpgrade php53-exifUpgrade php5-gdUpgrade php5-fileinfoUpgrade php53-gmpUpgrade php5-iconvUpgrade php72-ftpUpgrade php5-intlUpgrade php53-xmlrpcUpgrade php72-fastcgiUpgrade php53-bz2Upgrade php53-wddxUpgrade php5-suhosinUpgrade php7-develUpgrade php7-curlUpgrade php5-ctypeUpgrade php7-enchantUpgrade php5-mbstringUpgrade php74-shmopUpgrade php53-intlUpgrade php53-tokenizerUpgrade php7-mysqlUpgrade php72-gettextUpgrade php74-mysqlUpgrade php74-pdoUpgrade php72-sqliteUpgrade php7-pearUpgrade php5-exifUpgrade php7-testUpgrade php7-pharUpgrade php72-tokenizerUpgrade php74-snmpUpgrade php74-iconvUpgrade php5-sysvmsgUpgrade php72-ldapUpgrade php7-ftpUpgrade php74-dbaUpgrade php74-tidyUpgrade php53-pgsqlUpgrade php5-posixUpgrade php5-xslUpgrade php72-iconvUpgrade php5-ldapUpgrade php7-xmlwriterUpgrade php7-zlibUpgrade php5-sqliteUpgrade php7-iconvUpgrade apache2-mod_php74Upgrade php5-domUpgrade php5-zlibUpgrade php53-sysvsemUpgrade apache2-mod_php72Upgrade php72-pspellUpgrade php74-fileinfoUpgrade php7-fileinfoUpgrade php72-odbcUpgrade php7-ldapUpgrade php7-sysvsemUpgrade php74-fpmUpgrade php72-pharUpgrade php72-opcacheUpgrade php7-pspellUpgrade php72-calendarUpgrade php5-socketsUpgrade php72-develUpgrade php5-pspellUpgrade php74-develUpgrade php74-gdUpgrade php5-opcacheUpgrade php74Upgrade php5-pgsqlUpgrade php72-intlUpgrade php72-jsonUpgrade php7-wddxUpgrade apache2-mod_php5Upgrade php72-domUpgrade php5-xmlrpcUpgrade php74-fastcgiUpgrade php53-sysvmsgUpgrade php5-curlUpgrade php7-calendarUpgrade php7-sysvshmUpgrade php7-zipUpgrade php53-opensslUpgrade php7-tokenizerUpgrade php7-readlineUpgrade php72-xslUpgrade php53-ldapUpgrade php7-odbcUpgrade php53-soapUpgrade php72-pearUpgrade php72-wddxUpgrade php72-socketsUpgrade php7-jsonUpgrade php7-shmopUpgrade php74-domUpgrade php72-pear-archive_tarUpgrade php7-fastcgiUpgrade php53-jsonUpgrade php5-sysvshmUpgrade php72-soapUpgrade php53-mysqlUpgrade php53-pspellUpgrade apache2-mod_php53Upgrade php5-enchantUpgrade php72-enchantUpgrade php7-bcmathUpgrade php5-tokenizerUpgrade php5-dbaUpgrade php74-curlUpgrade php74-odbcUpgrade php7-snmpUpgrade php74-pcntlUpgrade php74-sqliteUpgrade php72-imapUpgrade php74-sysvshmUpgrade php74-opcacheUpgrade php72-opensslUpgrade php7-ctypeUpgrade php72-tidyUpgrade php72-dbaUpgrade php74-sodiumUpgrade php53-domUpgrade php72-gmpUpgrade php74-ldapUpgrade php7-mcryptUpgrade php53-xslUpgrade php74-sysvmsgUpgrade php53-xmlwriterUpgrade php7-gettextUpgrade php5-pearUpgrade php72-exifUpgrade php72-posixUpgrade php5-bcmathUpgrade php5Upgrade php7-pdoUpgrade php72-sysvsemUpgrade php74-xslUpgrade php74-xmlwriterUpgrade php74-enchantUpgrade php74-socketsUpgrade php72-pgsqlUpgrade php74-zipUpgrade php74-tokenizerUpgrade php5-mysqlUpgrade php5-ftpUpgrade php53-calendarUpgrade php74-soapUpgrade php5-mcryptUpgrade php53-pearUpgrade php72-pcntlUpgrade php53-suhosinUpgrade php7-xmlreaderUpgrade php5-opensslUpgrade php53-bcmathUpgrade php72-sysvshmUpgrade php74-exifUpgrade php5-pharUpgrade php7-fpmUpgrade php53-curlUpgrade php53-ctypeUpgrade php7Upgrade php5-xmlwriterUpgrade php53-dbaUpgrade php53-mcryptUpgrade php53-gettextUpgrade php5-gettextUpgrade php53-fastcgiUpgrade php7-posixUpgrade php53-zlibUpgrade php74-ftpUpgrade php72-zlibUpgrade php7-embedUpgrade php53Upgrade php5-jsonUpgrade php72-fpmUpgrade php7-sysvmsgUpgrade php72-snmpUpgrade php5-shmopUpgrade php74-zlibUpgrade php72-xmlwriterUpgrade php72-pdoUpgrade php74-posixUpgrade php5-zipUpgrade php7-tidyUpgrade php72-zipUpgrade php72-readlineUpgrade php74-xmlreaderUpgrade php74-sysvsemUpgrade php53-odbcUpgrade php7-sodiumUpgrade php5-snmpUpgrade php74-gmpUpgrade php53-ftpUpgrade php72-fileinfoUpgrade php5-soapUpgrade php5-pcntlUpgrade php5-odbcUpgrade php53-pdoUpgrade php74-calendarUpgrade php72-xmlrpcUpgrade php7-xmlrpcUpgrade php74-opensslUpgrade php74-ctypeUpgrade php7-imapUpgrade php53-iconvUpgrade php7-pgsqlUpgrade php53-snmpUpgrade php7-intlUpgrade php5-imapUpgrade php53-mbstringUpgrade php53-gdUpgrade php72-bz2Upgrade php7-pear-archive_tarUpgrade php7-exifUpgrade php7-gdUpgrade php74-jsonUpgrade php72-curlUpgrade apache2-mod_php7Upgrade php74-pgsqlUpgrade php74-xmlrpcUpgrade php53-zipUpgrade php5-pdoUpgrade php74-pharUpgrade php7-firebirdUpgrade php5-sysvsemUpgrade php72-sodiumUpgrade php7-soapUpgrade php74-mbstringUpgrade php72-mysqlUpgrade php7-pcntlUpgrade php74-bcmathUpgrade php7-xslUpgrade php5-wddxUpgrade php72-ctypeUpgrade php7-opensslUpgrade php5-bz2Upgrade php7-socketsUpgrade php7-opcacheUpgrade php7-sqliteUpgrade php53-fileinfoUpgrade php74-intlUpgrade php53-shmopUpgrade php74-readlineUpgrade php72-sysvmsgUpgrade php72-xmlreaderUpgrade php72-mbstringUpgrade php72-gdUpgrade php72Upgrade php74-bz2Upgrade php7-mbstringUpgrade php7-dbaUpgrade php53-sysvshmUpgrade php5-fastcgiUpgrade php74-gettextUpgrade php72-bcmathUpgrade php53-xmlreaderUpgrade php7-bz2Upgrade php72-shmopUpgrade php7-domUpgrade php5-xmlreaderUpgrade php5-calendarUpgrade php53-pcntlUpgrade php5-gmpUpgrade php7-gmp | Feb 7, 2021 | Oct 2, 2020 |
| Ubuntu | — | Upgrade php5-curl (Ubuntu Pro)Upgrade php7.4-cgiUpgrade php7.0-cliUpgrade php5-curlUpgrade php7.2-curlUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade libapache2-mod-php7.0Upgrade php5-fpmUpgrade php7.2-cgiUpgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.4-fpmUpgrade php7.4-cliUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cliUpgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php7.4-curlUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php7.2-cliUpgrade php7.0-cgiUpgrade php7.0-fpmUpgrade php7.0-curl | Mar 9, 2021 | Oct 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub