In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially leading to other security implications - like contacting a wrong server or making a wrong access decision.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-snmpUpgrade php-embeddedUpgrade apcu-panelUpgrade php-gdUpgrade php-opcacheUpgrade php-intlUpgrade libzip-toolsUpgrade phpUpgrade php-enchantUpgrade php-processUpgrade libzipUpgrade php-xmlUpgrade php-cliUpgrade php-mysqlndUpgrade php-ffiUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-ldapUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade php-pearUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-dbaUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-mbstringUpgrade php-soapUpgrade php-bcmathUpgrade php-jsonUpgrade php-pdoUpgrade php-commonUpgrade php-xmlrpc | May 13, 2022 | Oct 4, 2021 |
| Alpine Linux | — | Upgrade php7Upgrade php8 | Oct 1, 2024 | Oct 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade php-pgsqlUpgrade php-bcmathUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-sodiumUpgrade php-commonUpgrade php-odbcUpgrade php-embeddedUpgrade phpUpgrade php-soapUpgrade php-dbaUpgrade php-ldapUpgrade php-pspellUpgrade php-dbgUpgrade php-intlUpgrade php-processUpgrade php-develUpgrade php-gdUpgrade php-gmpUpgrade php-xmlUpgrade php-pdoUpgrade php-snmpUpgrade php-fpmUpgrade php-cliUpgrade php-mysqlndUpgrade php-mbstringUpgrade php-enchant | Sep 14, 2023 | Oct 4, 2021 |
| Amazon_linux | — | Upgrade php73 | Sep 9, 2021 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 4, 2021 |
| Centos_linux | — | Upgrade php-pecl-xdebugUpgrade php-pearUpgrade php-intl-debuginfoUpgrade php-fpmUpgrade php-dba-debuginfoUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-gdUpgrade php-enchant-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade php-mbstringUpgrade libzipUpgrade php-pecl-xdebug-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debuginfoUpgrade php-odbcUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-pecl-rrd-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmathUpgrade php-processUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-opcacheUpgrade php-debuginfoUpgrade php-ldapUpgrade php-ldap-debuginfoUpgrade php-gmp-debuginfoUpgrade phpUpgrade php-ffi-debuginfoUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade apcu-panelUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-ffiUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-cliUpgrade php-embeddedUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-soap-debuginfoUpgrade php-mysqlndUpgrade libzip-develUpgrade php-opcache-debuginfoUpgrade php-common | May 13, 2022 | Oct 4, 2021 |
| Debian | — | Upgrade php7.4 | Jul 8, 2021 | Jul 8, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Sep 30, 2022 | Oct 4, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-processUpgrade phpUpgrade php-cliUpgrade php-odbcUpgrade php-ldapUpgrade php-recodeUpgrade php-gdUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-soapUpgrade php-pdoUpgrade php-commonUpgrade php-fpm | Sep 24, 2021 | Sep 24, 2021 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.23-11.4.38.0.1.101.3 on Solaris 11.4Upgrade web/php-73 to version 7.3.30-11.4.38.0.1.101.3 on Solaris 11.4Upgrade web/php-80 to version 8.0.10-11.4.38.0.1.101.3 on Solaris 11.4 | Nov 17, 2021 | Nov 17, 2021 |
| Oracle_linux | — | Upgrade php-odbcUpgrade php-pecl-rrdUpgrade php-jsonUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-dbgUpgrade php-fpmUpgrade php-dbaUpgrade php-gdUpgrade php-pgsqlUpgrade php-develUpgrade php-bcmathUpgrade php-mbstringUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-processUpgrade php-ffiUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-commonUpgrade php-xmlUpgrade php-pearUpgrade libzip-develUpgrade apcu-panelUpgrade php-ldapUpgrade php-snmpUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-xmlrpcUpgrade php-embeddedUpgrade phpUpgrade php-cli | May 18, 2022 | Jul 1, 2021 |
| Php | — | Upgrade to PHP version 8.0.7Upgrade to PHP version 7.3.28Upgrade to PHP version 7.4.20 | Nov 30, 2021 | Oct 4, 2021 |
| Redhat_linux | — | Upgrade php-debugsourceUpgrade php-pecl-rrdUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ffi-debuginfoUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-processUpgrade php-cliUpgrade php-embedded-debuginfoUpgrade apcu-panelUpgrade php-ldapUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade php-debuginfoUpgrade php-ffiUpgrade libzip-develUpgrade php-dbgUpgrade php-snmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-dbaUpgrade php-opcacheUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-pecl-zip-debuginfoUpgrade php-pdoUpgrade php-pearUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpcUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-bcmathUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-gdUpgrade php-pgsqlUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-soapUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade php-enchant-debuginfoNo solution existsUpgrade php-gd-debuginfoUpgrade php-intl-debuginfoUpgrade php-jsonUpgrade php-enchantUpgrade php-gmpUpgrade php-develUpgrade php-mysqlnd-debuginfoUpgrade php-fpmUpgrade php-pecl-apcu-debuginfo | May 13, 2022 | Oct 4, 2021 |
| Rocky_linux | — | Upgrade php-xmlrpcUpgrade php-commonUpgrade php-mbstringUpgrade php-cli-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-pgsql-debuginfoUpgrade php-processUpgrade php-opcache-debuginfoUpgrade php-snmpUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-cliUpgrade php-ffiUpgrade php-pecl-rrd-debugsourceUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-soap-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcuUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmathUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade libzipUpgrade php-gmpUpgrade php-dbgUpgrade php-ldapUpgrade php-json-debuginfoUpgrade php-develUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-enchant-debuginfoUpgrade php-enchantUpgrade php-fpm-debuginfoUpgrade php-gd-debuginfoUpgrade php-gdUpgrade libzip-debuginfoUpgrade php-pdoUpgrade php-fpmUpgrade php-pdo-debuginfoUpgrade php-ffi-debuginfoUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-pecl-zip-debugsourceUpgrade php-debugsourceUpgrade php-pecl-xdebug-debuginfo | Mar 5, 2024 | Oct 4, 2021 |
| Suse | — | Upgrade php72Upgrade php72-curlUpgrade php72-ctypeUpgrade php72-sodiumUpgrade php7-pear-archive_tarUpgrade php72-xmlrpcUpgrade php7Upgrade php72-odbcUpgrade php7-soapUpgrade php74-opcacheUpgrade php72-xmlreaderUpgrade php72-ftpUpgrade php74-domUpgrade php74-calendarUpgrade php7-fpmUpgrade php7-pdoUpgrade php7-enchantUpgrade php7-tidyUpgrade php74-pharUpgrade php7-xmlwriterUpgrade php7-pharUpgrade php74-dbaUpgrade php74-ctypeUpgrade php74-pdoUpgrade php7-mbstringUpgrade php7-posixUpgrade php72-iconvUpgrade php72-gmpUpgrade php7-pgsqlUpgrade php7-tokenizerUpgrade php74-xmlwriterUpgrade php72-soapUpgrade php72-xmlwriterUpgrade php72-socketsUpgrade php72-bcmathUpgrade php7-gdUpgrade php72-pgsqlUpgrade php7-sysvsemUpgrade apache2-mod_php7Upgrade php74-gettextUpgrade php72-zipUpgrade php74-exifUpgrade php72-sqliteUpgrade php7-domUpgrade php72-pear-archive_tarUpgrade php72-snmpUpgrade php7-ftpUpgrade php72-pspellUpgrade php74-fastcgiUpgrade php74-fpmUpgrade php74-opensslUpgrade php7-gettextUpgrade php74-sysvmsgUpgrade php7-sysvmsgUpgrade php72-mysqlUpgrade php74-snmpUpgrade php74-sysvsemUpgrade php7-iconvUpgrade php72-fastcgiUpgrade php7-develUpgrade php7-readlineUpgrade php74-xmlrpcUpgrade php74-tokenizerUpgrade php72-ldapUpgrade php74-jsonUpgrade php74-ldapUpgrade php74-pgsqlUpgrade php7-ldapUpgrade php7-exifUpgrade php7-socketsUpgrade php7-opensslUpgrade php74-ftpUpgrade php74-shmopUpgrade php7-wddxUpgrade php7-sqliteUpgrade php74-develUpgrade php7-bcmathUpgrade php72-pdoUpgrade php72-exifUpgrade php72-sysvsemUpgrade php7-snmpUpgrade php72-zlibUpgrade php74-xslUpgrade php7-zlibUpgrade php72-fpmUpgrade php7-embedUpgrade php74-readlineUpgrade php74-sqliteUpgrade php7-jsonUpgrade php7-pcntlUpgrade php74-mysqlUpgrade php72-readlineUpgrade php72-bz2Upgrade php7-cliUpgrade php72-wddxUpgrade php74-odbcUpgrade php72-gdUpgrade php72-gettextUpgrade php74-gmpUpgrade php74-socketsUpgrade php7-mysqlUpgrade php72-mbstringUpgrade php74-fileinfoUpgrade php7-calendarUpgrade php72-tidyUpgrade php72-fileinfoUpgrade php74-curlUpgrade php74-bcmathUpgrade php7-curlUpgrade php72-imapUpgrade php7-xslUpgrade php7-shmopUpgrade apache2-mod_php74Upgrade php7-xmlreaderUpgrade php72-opcacheUpgrade php74-posixUpgrade php72-opensslUpgrade php7-intlUpgrade php72-posixUpgrade php7-pearUpgrade php72-xslUpgrade php72-calendarUpgrade php74Upgrade php74-xmlreaderUpgrade php7-firebirdUpgrade php7-fastcgiUpgrade php72-sysvmsgUpgrade php72-develUpgrade php7-odbcUpgrade php74-tidyUpgrade php72-pearUpgrade php74-enchantUpgrade apache2-mod_php72Upgrade php72-enchantUpgrade php74-sysvshmUpgrade php7-ctypeUpgrade php74-sodiumUpgrade php72-pcntlUpgrade php72-dbaUpgrade php72-intlUpgrade php74-iconvUpgrade php7-dbaUpgrade php74-soapUpgrade php74-gdUpgrade php7-xmlrpcUpgrade php7-testUpgrade php72-jsonUpgrade php72-pharUpgrade php74-mbstringUpgrade php74-zlibUpgrade php74-intlUpgrade php74-bz2Upgrade php72-shmopUpgrade php72-domUpgrade php7-sodiumUpgrade php7-sysvshmUpgrade php7-fileinfoUpgrade php7-bz2Upgrade php72-tokenizerUpgrade php7-zipUpgrade php7-gmpUpgrade php7-opcacheUpgrade php74-zipUpgrade php74-pcntlUpgrade php72-sysvshm | Jul 30, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade php7.4-fpmUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.2-cgiUpgrade php7.4-cliUpgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.2-cliUpgrade php7.0-cli (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.2-fpmUpgrade libapache2-mod-php7.4Upgrade php7.4-cgiUpgrade php7.0-fpm (Ubuntu Pro) | Jul 8, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub