CVE-2017-7272 in PHP
Sumário (Inglês)
PHP through 7.1.3 enables potential SSRF in applications that accept an fsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead of the port number in the second argument of the function.
Reservar
27/03/2017
Divulgação
27/03/2017
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 99008 | PHP fsockopen Elevação de Privilégios | 918 | Não definido | Correção oficial | CVE-2017-7272 |