vulnerability

FreeBSD: VID-fe5c1e7a-7eed-11ef-9533-f875a43e1796 (CVE-2024-8925): php -- Multiple vulnerabilities

Severity
3
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
Sep 30, 2024
Added
Dec 10, 2025
Modified
Dec 10, 2025

Description

php.net reports: CVE-2024-8926: CGI: Fixed bug GHSA-9pqp-7h25-4f32 (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). CVE-2024-8927: CGI: Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable due to the environment variable collision). CVE-2024-9026: FPM: Fixed bug GHSA-865w-9rf3-2wh5 (Logs from childrens may be altered). CVE-2024-8925: SAPI: Fixed bug GHSA-9pqp-7h25-4f32 (Erroneous parsing of multipart form data).

Solutions

freebsd-upgrade-package-php81freebsd-upgrade-package-php82freebsd-upgrade-package-php83
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.