CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
49.2%
According to its self-reported version number, the version of PHP installed on the remote host is 8.0.x prior to 8.0.30, or 8.1.x prior to 8.1.22. It is, therefore, affected by multiple vulnerabilities:
A security issue with external entity loading in XML without enabling it. (CVE-2023-3823)
A buffer mismanagement in phar_dir_read(). (CVE-2023-3824)
Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.
No source data