Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-ffiUpgrade php-intlUpgrade php-snmpUpgrade php-develUpgrade php-pecl-xdebug3Upgrade php-xmlUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-odbcUpgrade libzip-develUpgrade php-fpmUpgrade php-dbgUpgrade php-pgsqlUpgrade php-ldapUpgrade php-commonUpgrade php-dbaUpgrade php-jsonUpgrade php-processUpgrade phpUpgrade php-pecl-xdebugUpgrade php-cliUpgrade libzipUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-gmpUpgrade php-soapUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade php-pearUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-gd | Dec 19, 2024 | Apr 29, 2024 |
| Alpine Linux | — | Upgrade php81Upgrade php83Upgrade php82 | Aug 22, 2024 | Apr 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade php-commonUpgrade php-cliUpgrade php-dbaUpgrade php-debuginfoUpgrade php-snmpUpgrade php-mbstringUpgrade php-processUpgrade php-pspellUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-develUpgrade php-opcacheUpgrade php-intlUpgrade php-sodiumUpgrade php-gdUpgrade phpUpgrade php-embeddedUpgrade php-xmlUpgrade php-dbgUpgrade php-gmpUpgrade php-pdoUpgrade php-odbcUpgrade php-ldapUpgrade php-fpmUpgrade php-enchantUpgrade php-soap | May 31, 2024 | Apr 29, 2024 |
| Amazon_linux_2023 | — | Upgrade php8.2-tidy-debuginfoUpgrade php8.2-pspellUpgrade php8.1-pdo-debuginfoUpgrade php8.2-cli-debuginfoUpgrade php8.2-snmpUpgrade php8.1-zipUpgrade php8.1-mbstringUpgrade php8.1-pdoUpgrade php8.1-pspellUpgrade php8.1-fpmUpgrade php8.1-ldap-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.2-cliUpgrade php8.2-sodium-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.1-ffiUpgrade php8.2-soapUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-pgsqlUpgrade php8.2-xml-debuginfoUpgrade php8.2-embeddedUpgrade php8.1-opcacheUpgrade php8.2-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.2-mbstringUpgrade php8.2-tidyUpgrade php8.2-opcacheUpgrade php8.2-dbaUpgrade php8.1-process-debuginfoUpgrade php8.2-develUpgrade php8.2-pspell-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.1-gmpUpgrade php8.2-embedded-debuginfoUpgrade php8.2-pgsqlUpgrade php8.2-gmpUpgrade php8.2-zipUpgrade php8.2-fpm-debuginfoUpgrade php8.2-enchantUpgrade php8.1-processUpgrade php8.2-process-debuginfoUpgrade php8.1-ldapUpgrade php8.2-bcmathUpgrade php8.2-pdoUpgrade php8.2-mysqlndUpgrade php8.1-tidyUpgrade php8.1-xmlUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-enchantUpgrade php8.2-pdo-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.1-snmp-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.1-soapUpgrade php8.1-bcmathUpgrade php8.2-common-debuginfoUpgrade php8.1-commonUpgrade php8.2-debugsourceUpgrade php8.2-dbgUpgrade php8.2-commonUpgrade php8.1-enchant-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1Upgrade php8.2-enchant-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.2-ldapUpgrade php8.2Upgrade php8.1-dbgUpgrade php8.1-develUpgrade php8.1-cli-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-pspell-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.2-intlUpgrade php8.2-bcmath-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-odbcUpgrade php8.1-gmp-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.2-zip-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.1-intlUpgrade php8.1-embedded-debuginfoUpgrade php8.2-sodiumUpgrade php8.2-xmlUpgrade php8.1-gd-debuginfoUpgrade php8.1-gdUpgrade php8.1-mysqlndUpgrade php8.2-pgsql-debuginfoUpgrade php8.2-ffi-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-fpm-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.2-gdUpgrade php8.1-snmpUpgrade php8.1-debuginfoUpgrade php8.1-cliUpgrade php8.2-odbcUpgrade php8.2-fpmUpgrade php8.1-zip-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.2-ffiUpgrade php8.1-opcache-debuginfoUpgrade php8.1-dbaUpgrade php8.2-process | Feb 17, 2025 | Apr 12, 2024 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Apr 17, 2024 | Apr 17, 2024 |
| Freebsd | — | Upgrade php83Upgrade php81Upgrade php82 | Dec 10, 2025 | Apr 16, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Apr 29, 2024 |
| Oracle_linux | — | Upgrade php-processUpgrade libzip-toolsUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-pearUpgrade php-xmlrpcUpgrade libzip-develUpgrade php-commonUpgrade php-dbaUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-opcacheUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-ldapUpgrade apcu-panelUpgrade php-intlUpgrade php-bcmathUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-ffiUpgrade phpUpgrade php-pecl-xdebug3Upgrade php-mysqlndUpgrade php-gmpUpgrade php-dbgUpgrade php-cliUpgrade php-gdUpgrade php-enchantUpgrade php-pdoUpgrade libzipUpgrade php-develUpgrade php-soap | Dec 12, 2024 | Apr 12, 2024 |
| Redhat_linux | — | Upgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-pecl-zip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrdUpgrade php-pecl-xdebug3Upgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-gdUpgrade php-pearUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-xmlUpgrade libzip-tools-debuginfoUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbg-debuginfoUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-xdebug3-debuginfoUpgrade php-processUpgrade php-mysqlnd-debuginfoUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade libzip-toolsUpgrade php-pecl-rrd-debugsourceUpgrade php-cli-debuginfoUpgrade php-json-debuginfoUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-soapUpgrade php-pecl-zipUpgrade php-soap-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-cliUpgrade libzipUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-intlUpgrade php-pecl-xdebug-debugsourceUpgrade php-embeddedUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-enchantNo solution existsUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade php-dbaUpgrade php-ldapUpgrade php-debugsourceUpgrade php-ffiUpgrade php-pgsqlUpgrade php-mysqlndUpgrade libzip-devel | Feb 10, 2025 | Apr 29, 2024 |
| Rocky_linux | — | Upgrade php-common-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-mbstring-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pgsqlUpgrade php-processUpgrade php-opcache-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-xdebugUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-xmlUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-rrdUpgrade php-process-debuginfoUpgrade php-snmpUpgrade php-xml-debuginfoUpgrade libzip-develUpgrade php-odbcUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-gmp-debuginfoUpgrade phpUpgrade php-jsonUpgrade php-gdUpgrade php-ffiUpgrade php-enchantUpgrade php-pdoUpgrade php-ldapUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-develUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-pecl-zipUpgrade php-ffi-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-gmpUpgrade php-bcmathUpgrade libzipUpgrade php-opcacheUpgrade php-pgsql-debuginfoUpgrade php-pdo-debuginfoUpgrade php-fpmUpgrade php-cliUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-intlUpgrade php-dbgUpgrade php-debugsourceUpgrade php-pecl-xdebug3-debugsourceUpgrade php-mysqlndUpgrade php-gd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-embeddedUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-apcu-debugsource | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade php7-embedUpgrade php7-ftpUpgrade php74-fpmUpgrade php8-sqliteUpgrade php74-readlineUpgrade php8-pcntlUpgrade php81-fileinfoUpgrade php81-embedUpgrade php81-mbstringUpgrade php81-pharUpgrade php81-xslUpgrade php7-fpmUpgrade php74-ctypeUpgrade php74-exifUpgrade php7-pdoUpgrade php74-gettextUpgrade php8-ftpUpgrade php81-mysqlUpgrade php74-pharUpgrade php8-tokenizerUpgrade php81-ftpUpgrade php8-sysvsemUpgrade php81-develUpgrade php8-odbcUpgrade php7-bz2Upgrade php74-dbaUpgrade php74-mysqlUpgrade apache2-mod_php8Upgrade php74-xslUpgrade php81-zlibUpgrade php81-calendarUpgrade php8-xmlreaderUpgrade php74-intlUpgrade php81-sysvmsgUpgrade php8-posixUpgrade php81-intlUpgrade php8-snmpUpgrade php7-dbaUpgrade php7-pcntlUpgrade php7-tokenizerUpgrade php7-ldapUpgrade php7-domUpgrade php81-sodiumUpgrade php7-gettextUpgrade php7-exifUpgrade php74-sysvsemUpgrade php8-soapUpgrade php74-zlibUpgrade php8-tidyUpgrade php81-xmlwriterUpgrade php81-odbcUpgrade php81-posixUpgrade php74-opensslUpgrade php74-pgsqlUpgrade php7-cliUpgrade php7-gdUpgrade php81-sqliteUpgrade php81-ffiUpgrade php81-testUpgrade php81-enchantUpgrade php81-readlineUpgrade php7-opensslUpgrade php7-soapUpgrade php81-gmpUpgrade php8-fileinfoUpgrade php7-sysvmsgUpgrade php74-ldapUpgrade php74-sysvmsgUpgrade php74-zipUpgrade php81-sysvshmUpgrade php7-mbstringUpgrade php7-tidyUpgrade php74-calendarUpgrade php74-sqliteUpgrade php7-zlibUpgrade php81-dbaUpgrade apache2-mod_php81Upgrade php7-jsonUpgrade php7-readlineUpgrade php8-fastcgiUpgrade php81-fpmUpgrade php7-xmlreaderUpgrade php8-pgsqlUpgrade php74-ftpUpgrade php81-fpm-apacheUpgrade php8-mbstringUpgrade php74-shmopUpgrade php8-fpmUpgrade php7-enchantUpgrade php8-gettextUpgrade php8-dbaUpgrade php8-iconvUpgrade php7-pgsqlUpgrade php74-domUpgrade php74-fastcgiUpgrade php74-gmpUpgrade php7Upgrade php74Upgrade php8-curlUpgrade php74-xmlwriterUpgrade php7-posixUpgrade php7-pharUpgrade php74-jsonUpgrade php74-posixUpgrade php8-opensslUpgrade php8-fpm-apacheUpgrade php74-xmlrpcUpgrade php8-pharUpgrade php81-fastcgiUpgrade php81-socketsUpgrade php7-bcmathUpgrade php7-gmpUpgrade php81-gdUpgrade php81-pgsqlUpgrade apache2-mod_php7Upgrade php81-snmpUpgrade php7-iconvUpgrade php7-snmpUpgrade php7-zipUpgrade php8-shmopUpgrade php74-pcntlUpgrade php74-enchantUpgrade php8-xslUpgrade php8-testUpgrade php74-odbcUpgrade php8-ctypeUpgrade php8-ldapUpgrade php81-cliUpgrade php8-gmpUpgrade php8-zipUpgrade php81-zipUpgrade php81-exifUpgrade php8-embedUpgrade php7-xslUpgrade php74-bcmathUpgrade php74-gdUpgrade php81-gettextUpgrade php8-xmlwriterUpgrade php8-calendarUpgrade php74-tidyUpgrade php74-soapUpgrade php74-iconvUpgrade php74-fileinfoUpgrade php7-socketsUpgrade apache2-mod_php74Upgrade php81-pdoUpgrade php7-develUpgrade php81-opensslUpgrade php81-opcacheUpgrade php81-bz2Upgrade php74-xmlreaderUpgrade php7-xmlwriterUpgrade php7-sqliteUpgrade php7-odbcUpgrade php74-tokenizerUpgrade php81-sysvsemUpgrade php74-sysvshmUpgrade php74-snmpUpgrade php7-sysvsemUpgrade php7-xmlrpcUpgrade php7-sodiumUpgrade php81-ctypeUpgrade php8-zlibUpgrade php8-sysvmsgUpgrade php81-bcmathUpgrade php7-shmopUpgrade php7-calendarUpgrade php8-enchantUpgrade php74-sodiumUpgrade php81-pcntlUpgrade php7-intlUpgrade php81-xmlreaderUpgrade php81-tokenizerUpgrade php81-iconvUpgrade php8-sodiumUpgrade php8-bcmathUpgrade php74-opcacheUpgrade php74-mbstringUpgrade php74-develUpgrade php81-curlUpgrade php8-gdUpgrade php8-exifUpgrade php8-domUpgrade php74-socketsUpgrade php7-ctypeUpgrade php81-soapUpgrade php81-ldapUpgrade php81-domUpgrade php81Upgrade php74-pdoUpgrade php81-tidyUpgrade php8-intlUpgrade php8-bz2Upgrade php8Upgrade php7-sysvshmUpgrade php7-mysqlUpgrade php7-fileinfoUpgrade php7-fastcgiUpgrade php8-sysvshmUpgrade php8-socketsUpgrade php8-readlineUpgrade php8-pdoUpgrade php8-opcacheUpgrade php8-mysqlUpgrade php8-develUpgrade php8-ffiUpgrade php8-cliUpgrade php74-curlUpgrade php74-bz2Upgrade php7-testUpgrade php7-opcacheUpgrade php7-curlUpgrade php81-shmop | Apr 29, 2024 | Apr 26, 2024 |
| Ubuntu | — | Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.4-xmlUpgrade libapache2-mod-php8.2Upgrade php8.1Upgrade php8.2-cgiUpgrade php7.2-xml (Ubuntu Pro)Upgrade php7.2-fpm (Ubuntu Pro)Upgrade php7.0-xml (Ubuntu Pro)Upgrade php7.4-cliUpgrade php8.2-fpmUpgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.4-fpmUpgrade libapache2-mod-php7.2 (Ubuntu Pro)Upgrade php8.1-cgiUpgrade php7.4Upgrade libapache2-mod-php7.4Upgrade php8.1-fpmUpgrade libapache2-mod-php8.1Upgrade php8.2Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php7.2-cli (Ubuntu Pro)Upgrade php7.2 (Ubuntu Pro)Upgrade php7.0 (Ubuntu Pro)Upgrade php7.4-cgiUpgrade php7.2-cgi (Ubuntu Pro)Upgrade php8.2-xmlUpgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.1-cliUpgrade php8.2-cliUpgrade php8.1-xml | Apr 30, 2024 | Apr 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub