PHP up to 8.1.28/8.2.19/8.3.7 URL Filter filter_var data authenticity

Summaryinfo

A vulnerability classified as critical was found in PHP up to 8.1.28/8.2.19/8.3.7. Affected is the function filter_var of the component URL Filter Handler. Such manipulation leads to input validation. This vulnerability is documented as CVE-2024-5458. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in PHP up to 8.1.28/8.2.19/8.3.7. It has been rated as critical. Affected by this issue is the function filter_var of the component URL Filter Handler. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-345. The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data. Impacted is integrity. CVE summarizes:

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2024-5458 since 05/29/2024. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 208047 (Amazon Linux 2 : php (ALASPHP8.2-2024-005)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 8.1.29, 8.2.20 or 8.3.8 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (208047). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Programming Language Software

Name

• PHP

Version

• 8.1.0
• 8.1.1
• 8.1.2
• 8.1.3
• 8.1.4
• 8.1.5
• 8.1.6
• 8.1.7
• 8.1.8
• 8.1.9
• 8.1.10
• 8.1.11
• 8.1.12
• 8.1.13
• 8.1.14
• 8.1.15
• 8.1.16
• 8.1.17
• 8.1.18
• 8.1.19
• 8.1.20
• 8.1.21
• 8.1.22
• 8.1.23
• 8.1.24
• 8.1.25
• 8.1.26
• 8.1.27
• 8.1.28
• 8.2.0
• 8.2.1
• 8.2.2
• 8.2.3
• 8.2.4
• 8.2.5
• 8.2.6
• 8.2.7
• 8.2.8
• 8.2.9
• 8.2.10
• 8.2.11
• 8.2.12
• 8.2.13
• 8.2.14
• 8.2.15
• 8.2.16
• 8.2.17
• 8.2.18
• 8.2.19
• 8.3.0
• 8.3.1
• 8.3.2
• 8.3.3
• 8.3.4
• 8.3.5
• 8.3.6
• 8.3.7

License

• open-source

Website

• Product: https://www.php.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion