In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apcu-panelUpgrade php-processUpgrade libzip-develUpgrade php-mysqlndUpgrade php-commonUpgrade php-pgsqlUpgrade php-dbaUpgrade php-ffiUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-opcacheUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-snmpUpgrade libzip-toolsUpgrade php-intlUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-fpmUpgrade libzipUpgrade php-enchantUpgrade php-dbgUpgrade php-pecl-xdebug3Upgrade php-xmlUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-odbcUpgrade php-embeddedUpgrade php-jsonUpgrade php-pearUpgrade php-develUpgrade phpUpgrade php-bcmathUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-soap | Feb 22, 2023 | Sep 28, 2022 |
| Alpine Linux | — | Upgrade php8Upgrade php81Upgrade php7 | Aug 22, 2024 | Sep 28, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-sodiumUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-cliUpgrade phpUpgrade php-commonUpgrade php-embeddedUpgrade php-fpmUpgrade php-dbgUpgrade php-develUpgrade php-xmlUpgrade php-enchantUpgrade php-ldapUpgrade php-pdoUpgrade php-odbcUpgrade php-gmpUpgrade php-debuginfoUpgrade php-intlUpgrade php-dbaUpgrade php-snmpUpgrade php-gdUpgrade php-processUpgrade php-opcacheUpgrade php-pspellUpgrade php-soapUpgrade php-mbstringUpgrade php-mysqlnd | Sep 14, 2023 | Sep 28, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-pdo-debuginfoUpgrade php8.1-enchantUpgrade php8.1-gmp-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.1-tidyUpgrade php8.1-processUpgrade php8.1-ldap-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1Upgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-commonUpgrade php8.1-embeddedUpgrade php8.1-opcacheUpgrade php8.1-soapUpgrade php8.1-debugsourceUpgrade php8.1-gmpUpgrade php8.1-process-debuginfoUpgrade php8.1-pdoUpgrade php8.1-ldapUpgrade php8.1-embedded-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-xmlUpgrade php8.1-intlUpgrade php8.1-dbaUpgrade php8.1-ffiUpgrade php8.1-ffi-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-odbcUpgrade php8.1-tidy-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-fpmUpgrade php8.1-develUpgrade php8.1-mysqlndUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-cliUpgrade php8.1-pgsqlUpgrade php8.1-mbstringUpgrade php8.1-gdUpgrade php8.1-fpm-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-dbgUpgrade php8.1-bcmath | Feb 17, 2025 | Sep 29, 2022 |
| Centos_linux | — | Upgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-develUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmpUpgrade php-pecl-zip-debugsourceUpgrade php-gd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-cliUpgrade php-pecl-xdebug3Upgrade libzipUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-xmlUpgrade php-xmlrpc-debuginfoUpgrade php-mbstringUpgrade php-fpmUpgrade php-mysqlnd-debuginfoUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-xdebug3-debugsourceUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-pgsqlUpgrade php-enchantUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-intlUpgrade php-pecl-rrd-debugsourceUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade phpUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-soap-debuginfoUpgrade php-gdUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-toolsUpgrade libzip-develUpgrade php-embeddedUpgrade php-processUpgrade php-pgsql-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ffiUpgrade php-process-debuginfoUpgrade php-ffi-debuginfoUpgrade apcu-panelUpgrade php-pecl-apcu-develUpgrade php-snmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-opcache | Feb 22, 2023 | Sep 28, 2022 |
| Debian | — | Upgrade php7.4 | Nov 15, 2022 | Sep 28, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Nov 23, 2022 | Sep 28, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-fpmUpgrade php-xmlUpgrade php-processUpgrade php-cliUpgrade phpUpgrade php-gdUpgrade php-xmlrpcUpgrade php-soapUpgrade php-commonUpgrade php-pdoUpgrade php-odbcUpgrade php-ldap | Feb 9, 2023 | Sep 28, 2022 |
| Oracle_linux | — | Upgrade php-pearUpgrade php-odbcUpgrade php-jsonUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-pgsqlUpgrade php-dbaUpgrade php-soapUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-bcmathUpgrade php-gmpUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-commonUpgrade php-develUpgrade php-fpmUpgrade php-enchantUpgrade libzip-toolsUpgrade phpUpgrade php-pecl-rrdUpgrade php-ldapUpgrade php-gdUpgrade php-embeddedUpgrade php-processUpgrade php-ffiUpgrade php-mysqlndUpgrade php-snmpUpgrade php-intlUpgrade apcu-panelUpgrade php-xmlUpgrade php-opcacheUpgrade php-cliUpgrade libzipUpgrade libzip-devel | Feb 23, 2023 | Sep 29, 2022 |
| Php | — | Upgrade to PHP version 7.4.31Upgrade to PHP version 8.1.11Upgrade to PHP version 8.0.24 | Nov 2, 2022 | Sep 28, 2022 |
| Redhat_linux | — | No solution existsUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-ffi-debuginfoUpgrade php-process-debuginfoUpgrade php-gmp-debuginfoUpgrade php-soapUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-snmp-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-mysqlndUpgrade php-enchantUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-embedded-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-xdebug3Upgrade php-opcacheUpgrade php-debugsourceUpgrade phpUpgrade libzip-develUpgrade php-processUpgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade libzipUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-pdoUpgrade libzip-toolsUpgrade php-dbaUpgrade php-develUpgrade php-snmpUpgrade php-jsonUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zipUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-bcmathUpgrade php-ldapUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-debuginfoUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-ffiUpgrade apcu-panelUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-fpm-debuginfo | Feb 22, 2023 | Sep 28, 2022 |
| Rocky_linux | — | Upgrade phpUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-develUpgrade php-bcmathUpgrade php-jsonUpgrade php-pecl-xdebug-debuginfoUpgrade php-process-debuginfoUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-ffi-debuginfoUpgrade php-develUpgrade php-pgsql-debuginfoUpgrade php-dbaUpgrade php-fpmUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-cliUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-xdebug3-debugsourceUpgrade php-intlUpgrade php-pecl-rrd-debugsourceUpgrade php-gmp-debuginfoUpgrade php-processUpgrade php-gdUpgrade php-soapUpgrade php-enchantUpgrade php-ffiUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-xmlrpc-debuginfoUpgrade php-debugsourceUpgrade php-gmpUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-xmlrpcUpgrade php-pdo-debuginfoUpgrade php-intl-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-develUpgrade php-odbc-debuginfoUpgrade php-opcache-debuginfo | Mar 12, 2024 | Sep 28, 2022 |
| Suse | — | Upgrade php8-sysvmsgUpgrade php74-ctypeUpgrade php74-dbaUpgrade php72-ftpUpgrade php8-ftpUpgrade php7-bz2Upgrade php8-gmpUpgrade php7-odbcUpgrade php8-odbcUpgrade php81-sodiumUpgrade php7-firebirdUpgrade php81-sysvsemUpgrade php72-bcmathUpgrade php8-pcntlUpgrade php7Upgrade php7-dbaUpgrade php81-ftpUpgrade php8-ctypeUpgrade php74-soapUpgrade php7-gmpUpgrade php7-ldapUpgrade php72-mbstringUpgrade php7-mbstringUpgrade php8Upgrade php74-intlUpgrade php72-xmlrpcUpgrade php8-tokenizerUpgrade php7-sqliteUpgrade php74-opensslUpgrade php7-readlineUpgrade php7-pearUpgrade php8-mysqlUpgrade php81-pcntlUpgrade php81-iconvUpgrade php81-calendarUpgrade php81-gdUpgrade php8-pgsqlUpgrade php74-ldapUpgrade php74-iconvUpgrade php74-exifUpgrade php8-fileinfoUpgrade php8-cliUpgrade php7-testUpgrade php7-tidyUpgrade php81-fpmUpgrade php8-dbaUpgrade php8-tidyUpgrade php72-sodiumUpgrade php7-embedUpgrade php72-wddxUpgrade php74-calendarUpgrade php72Upgrade php74-xslUpgrade php8-iconvUpgrade php7-mysqlUpgrade php7-xmlrpcUpgrade php8-fpmUpgrade php8-domUpgrade php8-zipUpgrade php74-bcmathUpgrade php81-ldapUpgrade php72-pgsqlUpgrade php72-snmpUpgrade php81-odbcUpgrade php81-readlineUpgrade php72-gdUpgrade php72-gettextUpgrade php7-shmopUpgrade php8-readlineUpgrade php7-domUpgrade php74-socketsUpgrade php8-curlUpgrade php74-xmlreaderUpgrade php81-gettextUpgrade php7-xslUpgrade php7-soapUpgrade php72-pear-archive_tarUpgrade php7-fpmUpgrade php81-develUpgrade php8-sysvsemUpgrade php81-ctypeUpgrade php72-tidyUpgrade php74-posixUpgrade php7-cliUpgrade php72-enchantUpgrade php74-mbstringUpgrade php8-ldapUpgrade php72-pcntlUpgrade php81-pgsqlUpgrade php7-develUpgrade php72-sysvsemUpgrade php81-opcacheUpgrade php72-iconvUpgrade php7-posixUpgrade php74-ftpUpgrade php7-pdoUpgrade php8-pdoUpgrade php81-dbaUpgrade apache2-mod_php8Upgrade php74-zlibUpgrade php7-xmlreaderUpgrade php81-sysvmsgUpgrade php72-sqliteUpgrade php74-xmlrpcUpgrade php72-gmpUpgrade php7-jsonUpgrade php74-sysvmsgUpgrade php8-gettextUpgrade php7-exifUpgrade php7-zipUpgrade php72-sysvshmUpgrade php7-sodiumUpgrade php72-zlibUpgrade php81-opensslUpgrade php81-tokenizerUpgrade php81-mysqlUpgrade php7-sysvshmUpgrade php8-xmlwriterUpgrade php8-zlibUpgrade php81-ffiUpgrade php7-gdUpgrade apache2-mod_php81Upgrade php81-cliUpgrade php81-pharUpgrade php72-ctypeUpgrade php74-gmpUpgrade php7-gettextUpgrade php81-sysvshmUpgrade php72-exifUpgrade php72-fileinfoUpgrade php8-develUpgrade php7-pear-archive_tarUpgrade php7-socketsUpgrade php7-zlibUpgrade php72-xmlwriterUpgrade php81-gmpUpgrade php81-xslUpgrade php74Upgrade php7-sysvsemUpgrade apache2-mod_php72Upgrade php7-calendarUpgrade php81-bcmathUpgrade php72-sysvmsgUpgrade php74-fileinfoUpgrade php74-develUpgrade php72-domUpgrade php72-soapUpgrade php81-zlibUpgrade php72-fpmUpgrade php72-calendarUpgrade php8-xmlreaderUpgrade php72-bz2Upgrade php72-intlUpgrade php81-domUpgrade php74-pharUpgrade php74-xmlwriterUpgrade php8-embedUpgrade php7-fastcgiUpgrade php8-intlUpgrade php7-pcntlUpgrade php74-jsonUpgrade php8-sodiumUpgrade php72-jsonUpgrade php74-bz2Upgrade php7-sysvmsgUpgrade php81-tidyUpgrade php81-mbstringUpgrade php81-testUpgrade php81Upgrade php72-xmlreaderUpgrade php81-snmpUpgrade php8-soapUpgrade php8-posixUpgrade php8-exifUpgrade php74-opcacheUpgrade php74-fastcgiUpgrade php72-mysqlUpgrade php7-curlUpgrade php72-dbaUpgrade php72-pspellUpgrade php81-xmlwriterUpgrade php81-fileinfoUpgrade php81-curlUpgrade php8-mbstringUpgrade php8-shmopUpgrade php8-bcmathUpgrade php8-enchantUpgrade php72-fastcgiUpgrade php74-sysvshmUpgrade php74-gdUpgrade php7-bcmathUpgrade php81-shmopUpgrade php81-zipUpgrade php8-bz2Upgrade php74-snmpUpgrade php72-opcacheUpgrade apache2-mod_php7Upgrade apache2-mod_php74Upgrade php74-zipUpgrade php72-ldapUpgrade php81-embedUpgrade php81-fpm-apacheUpgrade php8-sqliteUpgrade php8-opcacheUpgrade php72-opensslUpgrade php74-domUpgrade php72-xslUpgrade php72-pdoUpgrade php74-mysqlUpgrade php74-fpmUpgrade php72-curlUpgrade php7-wddxUpgrade php7-tokenizerUpgrade php7-snmpUpgrade php7-opensslUpgrade php72-imapUpgrade php81-xmlreaderUpgrade php74-readlineUpgrade php81-sqliteUpgrade php81-enchantUpgrade php8-xslUpgrade php8-socketsUpgrade php8-snmpUpgrade php74-pgsqlUpgrade php8-opensslUpgrade php74-tokenizerUpgrade php81-exifUpgrade php8-pharUpgrade php74-tidyUpgrade php74-enchantUpgrade php72-readlineUpgrade php72-pharUpgrade php7-ftpUpgrade php7-pgsqlUpgrade php7-enchantUpgrade php74-sysvsemUpgrade php7-fileinfoUpgrade php74-curlUpgrade php7-ctypeUpgrade php74-sodiumUpgrade php7-pharUpgrade php72-zipUpgrade php72-socketsUpgrade php74-gettextUpgrade php74-shmopUpgrade php72-odbcUpgrade php81-bz2Upgrade php8-testUpgrade php8-calendarUpgrade php8-gdUpgrade php72-develUpgrade php74-pdoUpgrade php81-socketsUpgrade php81-fastcgiUpgrade php81-soapUpgrade php7-iconvUpgrade php72-posixUpgrade php8-fastcgiUpgrade php72-pearUpgrade php81-posixUpgrade php81-pdoUpgrade php81-intlUpgrade php74-sqliteUpgrade php7-opcacheUpgrade php7-intlUpgrade php72-tokenizerUpgrade php74-pcntlUpgrade php7-xmlwriterUpgrade php72-shmopUpgrade php74-odbcUpgrade php8-sysvshm | Oct 26, 2022 | Sep 28, 2022 |
| Ubuntu | — | Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.4-cliUpgrade php8.1Upgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade php7.0-zip (Ubuntu Pro)Upgrade php8.1-cliUpgrade libapache2-mod-php8.1Upgrade php7.2-cgiUpgrade php7.2-cliUpgrade php7.2-zipUpgrade php8.1-zipUpgrade php8.1-cgiUpgrade libapache2-mod-php7.2Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.2Upgrade libapache2-mod-php8.0Upgrade php7.4Upgrade php7.4-zipUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.4-cgi | Nov 9, 2022 | Sep 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub