Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37698
HistoryOct 27, 2022 - 3:36 a.m.

Arbitrary Code Execution

2022-10-2703:36:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22
php8
vulnerability
imageloadfont
arbitrary code execution
hardware layer code box
application security

0.001 Low

EPSS

Percentile

34.3%

php8 is vulnerable to code executions. The vulnerability exists in imageloadfont() function due to insufficient input validation which allows a remote attacker to execute arbitrary code via the Hardware Layer Code Box component on the /hardware page of the application.