Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-cliUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php-processUpgrade libzipUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-gdUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-pearUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-soapUpgrade php-ffiUpgrade php-pecl-apcuUpgrade php-xmlUpgrade apcu-panelUpgrade php-snmpUpgrade php-ldapUpgrade php-intlUpgrade php-fpmUpgrade php-pgsqlUpgrade php-commonUpgrade php-develUpgrade php-pecl-xdebug3Upgrade php-odbcUpgrade php-dbgUpgrade libzip-devel | Dec 19, 2024 | Apr 29, 2024 |
| Alpine Linux | — | Upgrade php83Upgrade php82Upgrade php81 | Aug 22, 2024 | Apr 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade php-snmpUpgrade php-debuginfoUpgrade php-processUpgrade php-pspellUpgrade php-commonUpgrade php-cliUpgrade php-pgsqlUpgrade php-dbaUpgrade php-mbstringUpgrade php-fpmUpgrade php-gmpUpgrade php-dbgUpgrade php-gdUpgrade php-enchantUpgrade php-mysqlndUpgrade php-sodiumUpgrade php-opcacheUpgrade php-intlUpgrade php-soapUpgrade php-embeddedUpgrade phpUpgrade php-xmlUpgrade php-pdoUpgrade php-odbcUpgrade php-ldapUpgrade php-bcmathUpgrade php-devel | May 31, 2024 | Apr 29, 2024 |
| Amazon_linux_2023 | — | Upgrade php8.2-intl-debuginfoUpgrade php8.2-sodium-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-ffiUpgrade php8.1-pspellUpgrade php8.2-xml-debuginfoUpgrade php8.1-ldapUpgrade php8.2-soap-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.2-snmpUpgrade php8.1-mbstringUpgrade php8.1-pgsqlUpgrade php8.2-tidy-debuginfoUpgrade php8.2-process-debuginfoUpgrade php8.1-gmpUpgrade php8.1-fpmUpgrade php8.2-pspellUpgrade php8.2-zipUpgrade php8.1-ldap-debuginfoUpgrade php8.2-embeddedUpgrade php8.2-snmp-debuginfoUpgrade php8.2-bcmathUpgrade php8.2-develUpgrade php8.2-cli-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.1-pdoUpgrade php8.1-zipUpgrade php8.2-embedded-debuginfoUpgrade php8.2-debuginfoUpgrade php8.2-pdoUpgrade php8.2-dbaUpgrade php8.2-tidyUpgrade php8.1-processUpgrade php8.1-opcacheUpgrade php8.2-gmpUpgrade php8.2-opcacheUpgrade php8.2-pgsqlUpgrade php8.2-soapUpgrade php8.1-pdo-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.2-enchantUpgrade php8.2-pspell-debuginfoUpgrade php8.1-process-debuginfoUpgrade php8.2-mbstringUpgrade php8.2-cliUpgrade php8.1-dbgUpgrade php8.1Upgrade php8.2-pdo-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-commonUpgrade php8.2-debugsourceUpgrade php8.1-bcmathUpgrade php8.1-soapUpgrade php8.2-gd-debuginfoUpgrade php8.1-tidyUpgrade php8.2-commonUpgrade php8.2-ffiUpgrade php8.1-zip-debuginfoUpgrade php8.2-processUpgrade php8.1-opcache-debuginfoUpgrade php8.1-dbaUpgrade php8.1-xml-debuginfoUpgrade php8.2-fpmUpgrade php8.1-xmlUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.2-mysqlndUpgrade php8.2-odbcUpgrade php8.2-ldapUpgrade php8.2-dbg-debuginfoUpgrade php8.2Upgrade php8.1-develUpgrade php8.1-cli-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.2-sodiumUpgrade php8.1-intlUpgrade php8.1-embedded-debuginfoUpgrade php8.2-xmlUpgrade php8.1-mysqlndUpgrade php8.1-snmpUpgrade php8.2-ffi-debuginfoUpgrade php8.1-gdUpgrade php8.1-fpm-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.2-gdUpgrade php8.1-gd-debuginfoUpgrade php8.2-pgsql-debuginfoUpgrade php8.1-cliUpgrade php8.1-snmp-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.2-zip-debuginfoUpgrade php8.1-odbcUpgrade php8.1-gmp-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.1-pspell-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.2-intlUpgrade php8.2-dba-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.1-enchantUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.2-dbgUpgrade php8.2-enchant-debuginfoUpgrade php8.2-common-debuginfo | Feb 17, 2025 | Apr 12, 2024 |
| Debian | — | Upgrade php8.2Upgrade php7.4 | Apr 17, 2024 | Apr 17, 2024 |
| Freebsd | — | Upgrade php81Upgrade php82Upgrade php83 | Dec 10, 2025 | Apr 16, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Apr 29, 2024 |
| Oracle_linux | — | Upgrade php-cliUpgrade php-pdoUpgrade php-ldapUpgrade php-soapUpgrade libzipUpgrade php-intlUpgrade php-develUpgrade php-dbgUpgrade php-gmpUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-opcacheUpgrade php-embeddedUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-pecl-xdebug3Upgrade phpUpgrade php-jsonUpgrade php-ffiUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-enchantUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-processUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade libzip-toolsUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-pearUpgrade php-commonUpgrade php-odbcUpgrade php-snmp | Dec 12, 2024 | Apr 12, 2024 |
| Redhat_linux | — | Upgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug3Upgrade php-gdUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-mbstringUpgrade php-commonUpgrade php-fpmUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-jsonUpgrade php-xmlUpgrade php-xmlrpc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-apcu-develUpgrade php-intl-debuginfoUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-soap-debuginfoUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-odbcUpgrade php-ffiUpgrade phpUpgrade php-gmp-debuginfoUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade php-process-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-mysqlndUpgrade php-bcmath-debuginfoNo solution existsUpgrade php-pgsqlUpgrade php-soapUpgrade libzip-toolsUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debugsourceUpgrade php-intlUpgrade php-bcmathUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-enchant-debuginfoUpgrade php-cliUpgrade libzip-develUpgrade php-ffi-debuginfoUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-ldapUpgrade php-dbaUpgrade apcu-panel | Feb 10, 2025 | Apr 29, 2024 |
| Rocky_linux | — | Upgrade php-cli-debuginfoUpgrade php-dbaUpgrade php-enchant-debuginfoUpgrade phpUpgrade php-gmp-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-pecl-xdebug3-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebug3-debugsourceUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug3Upgrade php-pecl-apcu-debuginfoUpgrade php-develUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-ldapUpgrade php-pdoUpgrade php-enchantUpgrade php-intlUpgrade php-opcacheUpgrade php-embedded-debuginfoUpgrade php-ffiUpgrade php-pecl-zip-debuginfoUpgrade php-soapUpgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-fpmUpgrade php-ffi-debuginfoUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-bcmathUpgrade php-pgsql-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-pecl-rrdUpgrade php-opcache-debuginfoUpgrade php-processUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-commonUpgrade php-mbstringUpgrade php-snmpUpgrade php-xml-debuginfoUpgrade php-process-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-develUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php-xmlUpgrade php-snmp-debuginfoUpgrade libzip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfo | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade php8-gettextUpgrade php8-iconvUpgrade php74-shmopUpgrade php81-enchantUpgrade php7-mbstringUpgrade php7-tidyUpgrade php74-ftpUpgrade php81-sysvshmUpgrade php7-cliUpgrade php7-xmlreaderUpgrade php81-odbcUpgrade php81-gmpUpgrade php7-pcntlUpgrade php81-mysqlUpgrade php7-gdUpgrade php8-fpmUpgrade php8-fastcgiUpgrade php7-zlibUpgrade php74-sqliteUpgrade php74-calendarUpgrade php81-dbaUpgrade php7-dbaUpgrade php8-opensslUpgrade php81-fastcgiUpgrade php8-fpm-apacheUpgrade php81-gdUpgrade php74-posixUpgrade php8-curlUpgrade php81-pgsqlUpgrade php7-readlineUpgrade php8-mbstringUpgrade php81-snmpUpgrade php81-socketsUpgrade apache2-mod_php7Upgrade php7Upgrade php8-posixUpgrade php81-calendarUpgrade php8-snmpUpgrade php81-ftpUpgrade php7-tokenizerUpgrade php8-ftpUpgrade php7-pdoUpgrade php7-snmpUpgrade php81-develUpgrade php8-sqliteUpgrade php74-ctypeUpgrade php8-xmlreaderUpgrade php8-tidyUpgrade php74-exifUpgrade php74-gettextUpgrade php74Upgrade php74-zlibUpgrade php8-soapUpgrade php74-sysvsemUpgrade php81-posixUpgrade php7-domUpgrade php7-gettextUpgrade php7-ldapUpgrade php81-sodiumUpgrade php7-bcmathUpgrade php7-jsonUpgrade php8-dbaUpgrade php8-sysvsemUpgrade apache2-mod_php81Upgrade php74-domUpgrade php81-zlibUpgrade php7-bz2Upgrade php74-pharUpgrade php8-fileinfoUpgrade php74-pgsqlUpgrade php8-pgsqlUpgrade php74-dbaUpgrade php74-intlUpgrade php74-opensslUpgrade php81-fpmUpgrade php74-fpmUpgrade php7-ftpUpgrade php74-ldapUpgrade php81-fpm-apacheUpgrade php7-soapUpgrade php7-fpmUpgrade php74-xslUpgrade php81-intlUpgrade php74-sysvmsgUpgrade php74-zipUpgrade php7-sysvmsgUpgrade php81-ffiUpgrade php81-mbstringUpgrade php81-readlineUpgrade php81-sqliteUpgrade php7-enchantUpgrade php81-embedUpgrade php81-xslUpgrade php74-gmpUpgrade php8-tokenizerUpgrade php8-pcntlUpgrade php7-opensslUpgrade php81-sysvmsgUpgrade php7-embedUpgrade php8-pharUpgrade php81-pharUpgrade php74-xmlrpcUpgrade php81-testUpgrade php74-xmlwriterUpgrade php7-pharUpgrade php7-posixUpgrade php81-fileinfoUpgrade php74-jsonUpgrade php7-gmpUpgrade php7-iconvUpgrade php7-pgsqlUpgrade apache2-mod_php8Upgrade php74-mysqlUpgrade php81-xmlwriterUpgrade php74-readlineUpgrade php7-exifUpgrade php74-fastcgiUpgrade php8-odbcUpgrade php74-tokenizerUpgrade php7-socketsUpgrade php81-shmopUpgrade php8-testUpgrade php8-ffiUpgrade php8-cliUpgrade php74-odbcUpgrade php74-curlUpgrade php74-bz2Upgrade php7-testUpgrade php7-opcacheUpgrade php7-curlUpgrade php8-domUpgrade php8-gmpUpgrade php74-iconvUpgrade php74-socketsUpgrade php81-curlUpgrade php8-gdUpgrade php8-exifUpgrade php74-mbstringUpgrade php74-develUpgrade php7-ctypeUpgrade php81-ldapUpgrade php8Upgrade php7-develUpgrade php7-sysvshmUpgrade php8-sodiumUpgrade php81-xmlreaderUpgrade php81Upgrade php81-sysvsemUpgrade php8-ldapUpgrade php81-bcmathUpgrade php74-tidyUpgrade php8-xmlwriterUpgrade php81-bz2Upgrade php8-shmopUpgrade php74-xmlreaderUpgrade php7-xmlwriterUpgrade php81-zipUpgrade php8-sysvshmUpgrade php8-socketsUpgrade php8-intlUpgrade php8-bz2Upgrade php74-pdoUpgrade php74-enchantUpgrade php74-pcntlUpgrade php7-mysqlUpgrade php7-fileinfoUpgrade php7-fastcgiUpgrade php81-tidyUpgrade php8-readlineUpgrade php8-pdoUpgrade php8-opcacheUpgrade php8-mysqlUpgrade php81-opcacheUpgrade php81-iconvUpgrade php8-bcmathUpgrade php74-opcacheUpgrade php7-intlUpgrade php81-tokenizerUpgrade php81-opensslUpgrade php7-sqliteUpgrade apache2-mod_php74Upgrade php81-pdoUpgrade php81-gettextUpgrade php74-sysvshmUpgrade php7-sodiumUpgrade php7-odbcUpgrade php81-ctypeUpgrade php81-exifUpgrade php8-zlibUpgrade php74-snmpUpgrade php7-xmlrpcUpgrade php8-calendarUpgrade php74-soapUpgrade php74-fileinfoUpgrade php7-zipUpgrade php8-sysvmsgUpgrade php81-cliUpgrade php7-sysvsemUpgrade php81-soapUpgrade php81-domUpgrade php8-enchantUpgrade php8-ctypeUpgrade php8-embedUpgrade php74-gdUpgrade php7-xslUpgrade php74-bcmathUpgrade php7-shmopUpgrade php8-zipUpgrade php74-sodiumUpgrade php81-pcntlUpgrade php7-calendarUpgrade php8-develUpgrade php8-xsl | Apr 29, 2024 | Apr 26, 2024 |
| Ubuntu | — | Upgrade php8.1-fpmUpgrade php7.2-cli (Ubuntu Pro)Upgrade php7.4Upgrade php7.2 (Ubuntu Pro)Upgrade php8.2-cliUpgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.1-cliUpgrade php7.0 (Ubuntu Pro)Upgrade php8.1-xmlUpgrade libapache2-mod-php8.1Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php8.2-xmlUpgrade php8.2Upgrade libapache2-mod-php7.4Upgrade php7.4-cgiUpgrade php7.2-cgi (Ubuntu Pro)Upgrade php8.1-cgiUpgrade php7.4-fpmUpgrade php8.1Upgrade php8.2-cgiUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php8.2-fpmUpgrade php7.0-cli (Ubuntu Pro)Upgrade php7.4-cliUpgrade php7.2-fpm (Ubuntu Pro)Upgrade libapache2-mod-php8.2Upgrade php7.2-xml (Ubuntu Pro)Upgrade libapache2-mod-php7.2 (Ubuntu Pro)Upgrade php7.4-xmlUpgrade php7.0-xml (Ubuntu Pro) | Apr 30, 2024 | Apr 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub