In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-develUpgrade php-dbaUpgrade php-pgsqlUpgrade php-ffiUpgrade php-snmpUpgrade php-commonUpgrade php-processUpgrade libzip-toolsUpgrade php-mbstringUpgrade apcu-panelUpgrade php-opcacheUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-pdoUpgrade php-gmpUpgrade php-soapUpgrade php-dbgUpgrade php-fpmUpgrade php-gdUpgrade php-xmlUpgrade php-embeddedUpgrade php-odbcUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade php-jsonUpgrade php-bcmathUpgrade php-ldapUpgrade php-enchantUpgrade php-pecl-xdebugUpgrade php-pearUpgrade libzipUpgrade php-pecl-zip | Feb 22, 2023 | Sep 28, 2022 |
| Alpine Linux | — | Upgrade php8Upgrade php7Upgrade php81 | Aug 22, 2024 | Sep 28, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-dbgUpgrade php-commonUpgrade phpUpgrade php-bcmathUpgrade php-embeddedUpgrade php-fpmUpgrade php-odbcUpgrade php-pgsqlUpgrade php-gmpUpgrade php-enchantUpgrade php-develUpgrade php-cliUpgrade php-pdoUpgrade php-sodiumUpgrade php-xmlUpgrade php-ldapUpgrade php-mbstringUpgrade php-opcacheUpgrade php-snmpUpgrade php-gdUpgrade php-intlUpgrade php-debuginfoUpgrade php-processUpgrade php-mysqlndUpgrade php-dbaUpgrade php-soapUpgrade php-pspell | Sep 14, 2023 | Sep 28, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-ffi-debuginfoUpgrade php8.1-odbcUpgrade php8.1-dbg-debuginfoUpgrade php8.1-develUpgrade php8.1-odbc-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-fpmUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-cliUpgrade php8.1-dbgUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-pgsqlUpgrade php8.1-fpm-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-bcmathUpgrade php8.1-gdUpgrade php8.1-mbstringUpgrade php8.1-gd-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-gmpUpgrade php8.1-gmp-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-xmlUpgrade php8.1-soapUpgrade php8.1-ldapUpgrade php8.1-ffiUpgrade php8.1-processUpgrade php8.1-ldap-debuginfoUpgrade php8.1-intlUpgrade php8.1-dbaUpgrade php8.1-embedded-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-commonUpgrade php8.1-common-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-dba-debuginfoUpgrade php8.1Upgrade php8.1-process-debuginfoUpgrade php8.1-pdoUpgrade php8.1-debugsourceUpgrade php8.1-enchantUpgrade php8.1-tidy | Feb 17, 2025 | Sep 29, 2022 |
| Centos_linux | — | Upgrade php-ldap-debuginfoUpgrade php-processUpgrade apcu-panelUpgrade php-ffiUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade php-gdUpgrade php-enchantUpgrade php-opcacheUpgrade php-snmp-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ldapUpgrade php-ffi-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade libzip-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-develUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-cli-debuginfoUpgrade php-odbcUpgrade libzip-develUpgrade libzip-toolsUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-soapUpgrade php-dbaUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-soap-debuginfoUpgrade php-pgsqlUpgrade php-dbgUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlUpgrade php-intl-debuginfoUpgrade php-cliUpgrade php-snmpUpgrade php-mbstringUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-develUpgrade libzipUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pearUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-zipUpgrade php-pdo | Feb 22, 2023 | Sep 28, 2022 |
| Debian | — | Upgrade php7.4 | Nov 15, 2022 | Sep 28, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Nov 23, 2022 | Sep 28, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-odbcUpgrade php-soapUpgrade php-pdoUpgrade php-ldapUpgrade php-commonUpgrade php-fpmUpgrade php-recodeUpgrade phpUpgrade php-processUpgrade php-cliUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-gd | Feb 9, 2023 | Sep 28, 2022 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-gmpUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-develUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-pecl-xdebug3Upgrade php-mbstringUpgrade php-pearUpgrade php-soapUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-ldapUpgrade php-processUpgrade php-snmpUpgrade php-intlUpgrade php-cliUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-ffiUpgrade php-gdUpgrade libzipUpgrade php-pecl-rrdUpgrade php-enchantUpgrade libzip-develUpgrade php-embeddedUpgrade php-opcacheUpgrade libzip-toolsUpgrade phpUpgrade php-xml | Feb 23, 2023 | Sep 29, 2022 |
| Php | — | Upgrade to PHP version 7.4.31Upgrade to PHP version 8.1.11Upgrade to PHP version 8.0.24 | Nov 2, 2022 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade php-pecl-rrdUpgrade php-develUpgrade php-pecl-zip-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-ffiUpgrade apcu-panelUpgrade php-pecl-xdebug3-debuginfoUpgrade php-enchant-debuginfoUpgrade php-fpm-debuginfoUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-cli-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-odbc-debuginfoUpgrade php-intlUpgrade php-ldapUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-bcmathUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debugsourceUpgrade php-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-pearUpgrade php-gmpUpgrade php-embeddedUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-embedded-debuginfoUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-fpmUpgrade php-gdUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-pdoUpgrade php-opcache-debuginfoUpgrade phpUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade libzip-develUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-jsonUpgrade php-debugsourceUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-opcacheUpgrade php-pecl-xdebug3Upgrade php-ldap-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-dbg-debuginfo | Feb 22, 2023 | Sep 28, 2022 |
| Rocky_linux | — | Upgrade php-embeddedUpgrade php-ffi-debuginfoUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-embedded-debuginfoUpgrade php-processUpgrade php-enchantUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-pecl-rrd-debugsourceUpgrade php-ffiUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrdUpgrade php-debugsourceUpgrade php-ldapUpgrade php-mysqlndUpgrade php-gmpUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-jsonUpgrade php-process-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade phpUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade libzipUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-develUpgrade php-cliUpgrade php-dbg-debuginfoUpgrade php-fpmUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-snmpUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-mbstringUpgrade libzip-develUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-odbcUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug3Upgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsource | Mar 12, 2024 | Sep 28, 2022 |
| Suse | — | Upgrade php74Upgrade php7-calendarUpgrade php74-pharUpgrade php74-pcntlUpgrade php7-xmlwriterUpgrade php74-sodiumUpgrade php74-sysvshmUpgrade php8-fastcgiUpgrade php81-fastcgiUpgrade php74-pgsqlUpgrade php72-pdoUpgrade php81-socketsUpgrade php72-soapUpgrade php81-pdoUpgrade php81-soapUpgrade php7-iconvUpgrade php74-fpmUpgrade php74-snmpUpgrade php72-posixUpgrade php74-pdoUpgrade php81-intlUpgrade php81-bcmathUpgrade php72-zipUpgrade php7-wddxUpgrade php72-imapUpgrade php74-domUpgrade php7-pgsqlUpgrade php74-tidyUpgrade php8-pharUpgrade php74-zipUpgrade php81-exifUpgrade php8-gdUpgrade php7-bcmathUpgrade php7-ftpUpgrade php7-pharUpgrade php74-sysvsemUpgrade php81-sqliteUpgrade php72-opensslUpgrade php8-socketsUpgrade php8-snmpUpgrade php81-enchantUpgrade php7-tokenizerUpgrade php7-ctypeUpgrade php7-snmpUpgrade php72-curlUpgrade php81-xslUpgrade php72-intlUpgrade apache2-mod_php72Upgrade php74-mysqlUpgrade php74-enchantUpgrade php72-readlineUpgrade php8-shmopUpgrade php81-zlibUpgrade php8-enchantUpgrade php7-sysvsemUpgrade php72-bz2Upgrade php72-dbaUpgrade php74-opcacheUpgrade php72-odbcUpgrade php72-shmopUpgrade php72-socketsUpgrade php72-pearUpgrade php72-sysvmsgUpgrade php81-bz2Upgrade php72-develUpgrade php7-pcntlUpgrade php72-tokenizerUpgrade php74-odbcUpgrade php74-sqliteUpgrade php74-fileinfoUpgrade php8-calendarUpgrade php8-xmlreaderUpgrade php81-xmlwriterUpgrade php74-develUpgrade php8-sysvshmUpgrade php72-domUpgrade php74-curlUpgrade php7-enchantUpgrade php8-bcmathUpgrade php8-testUpgrade php74-shmopUpgrade php81-gmpUpgrade php7-intlUpgrade php74-gdUpgrade apache2-mod_php74Upgrade php81-embedUpgrade php8-bz2Upgrade apache2-mod_php7Upgrade php81-shmopUpgrade php81-zipUpgrade php8-xslUpgrade php8-opcacheUpgrade php8-sqliteUpgrade php81-fpm-apacheUpgrade php72-ldapUpgrade php72-fpmUpgrade php72-mysqlUpgrade php72-fastcgiUpgrade php81Upgrade php7-sysvmsgUpgrade php81-domUpgrade php81-tidyUpgrade php7-fastcgiUpgrade php72-calendarUpgrade php81-mbstringUpgrade php8-intlUpgrade php8-posixUpgrade php8-embedUpgrade php8-soapUpgrade php74-jsonUpgrade php74-xmlwriterUpgrade php8-sodiumUpgrade php81-testUpgrade php74-gettextUpgrade php8-exifUpgrade php7-fileinfoUpgrade php72-jsonUpgrade php81-posixUpgrade php8-opensslUpgrade php72-pharUpgrade php72-xmlreaderUpgrade php74-readlineUpgrade php74-tokenizerUpgrade php8-mbstringUpgrade php72-xslUpgrade php81-xmlreaderUpgrade php74-bz2Upgrade php81-snmpUpgrade php7-opcacheUpgrade php72-pspellUpgrade php81-fileinfoUpgrade php81-curlUpgrade php74-fastcgiUpgrade php72-opcacheUpgrade php7-curlUpgrade php7-opensslUpgrade php74-socketsUpgrade php8-dbaUpgrade php74-zlibUpgrade php81-ffiUpgrade php81-opensslUpgrade php8-xmlwriterUpgrade php7-develUpgrade php81-calendarUpgrade php8-pcntlUpgrade php74-xmlrpcUpgrade php72-sqliteUpgrade php72-gmpUpgrade php81-odbcUpgrade php81-cliUpgrade php72-ftpUpgrade php8-ftpUpgrade php8-cliUpgrade php8-gmpUpgrade php74-ftpUpgrade php8-zipUpgrade php74-bcmathUpgrade php8-odbcUpgrade php8-iconvUpgrade php7-dbaUpgrade php72-pcntlUpgrade php72-enchantUpgrade php7-xslUpgrade php7-sodiumUpgrade php7-posixUpgrade php72-ctypeUpgrade php72-tidyUpgrade php72-sysvshmUpgrade php72-pear-archive_tarUpgrade php72-fileinfoUpgrade php7-pdoUpgrade php7-gettextUpgrade php81-sysvshmUpgrade php81-pharUpgrade php81-pgsqlUpgrade php8-develUpgrade php74-posixUpgrade php74-ldapUpgrade php8-curlUpgrade php81-gdUpgrade php8-ldapUpgrade php72-exifUpgrade php81-ctypeUpgrade php72-zlibUpgrade php74-xmlreaderUpgrade php81-gettextUpgrade php81-develUpgrade php8-sysvsemUpgrade php8-readlineUpgrade php74-mbstringUpgrade php8-pdoUpgrade php74-opensslUpgrade php72-xmlwriterUpgrade php7-gdUpgrade php7-fpmUpgrade php7-readlineUpgrade php7-embedUpgrade php8Upgrade php8-tokenizerUpgrade php8-gettextUpgrade php72-xmlrpcUpgrade php81-sodiumUpgrade php7-testUpgrade php74-calendarUpgrade php81-readlineUpgrade php74-xslUpgrade php74-soapUpgrade php72Upgrade php7-xmlrpcUpgrade php7-tidyUpgrade php7-shmopUpgrade php7-mysqlUpgrade php7-domUpgrade php81-ftpUpgrade php8-fpmUpgrade php72-wddxUpgrade apache2-mod_php81Upgrade php81-tokenizerUpgrade php81-iconvUpgrade php7-jsonUpgrade php7-soapUpgrade php8-ctypeUpgrade php8-tidyUpgrade php7-socketsUpgrade php7-exifUpgrade php8-zlibUpgrade php7-sqliteUpgrade php72-sodiumUpgrade php7-ldapUpgrade php7-zipUpgrade php7-xmlreaderUpgrade php7-firebirdUpgrade php81-pcntlUpgrade php81-mysqlUpgrade php8-mysqlUpgrade php81-fpmUpgrade php72-bcmathUpgrade php7-cliUpgrade php74-gmpUpgrade php74-sysvmsgUpgrade php7-zlibUpgrade php74-intlUpgrade php7-sysvshmUpgrade php7-pearUpgrade php81-ldapUpgrade php74-ctypeUpgrade php7-odbcUpgrade php7-mbstringUpgrade php81-sysvsemUpgrade php8-sysvmsgUpgrade php72-mbstringUpgrade php7-bz2Upgrade php72-gettextUpgrade php8-domUpgrade php72-snmpUpgrade php72-pgsqlUpgrade php72-sysvsemUpgrade php74-exifUpgrade php72-iconvUpgrade php8-fileinfoUpgrade php7-gmpUpgrade php7-pear-archive_tarUpgrade apache2-mod_php8Upgrade php7Upgrade php74-dbaUpgrade php72-gdUpgrade php81-dbaUpgrade php74-iconvUpgrade php81-opcacheUpgrade php81-sysvmsgUpgrade php8-pgsql | Oct 26, 2022 | Sep 28, 2022 |
| Ubuntu | — | Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade php7.4-cliUpgrade php7.2-zipUpgrade php7.0-zip (Ubuntu Pro)Upgrade php8.1-cliUpgrade php7.2-cgiUpgrade libapache2-mod-php8.1Upgrade php8.1-zipUpgrade php7.2-cliUpgrade php8.1-cgiUpgrade libapache2-mod-php7.2Upgrade php8.1Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.4-zipUpgrade php7.2Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.0 (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.4-cgiUpgrade php7.4Upgrade libapache2-mod-php8.0Upgrade libapache2-mod-php7.0 (Ubuntu Pro) | Nov 9, 2022 | Sep 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub