PHP Patches Multi Flaws, Including CVE-2024-8932 (CVSS 9.8), Urges Immediate Update


The PHP development team has released urgent security updates to address multiple vulnerabilities affecting versions prior to 8.1.31, 8.2.26, and 8.3.14. These vulnerabilities range in severity, with some potentially allowing attackers to leak sensitive information, execute arbitrary code, or launch denial-of-service attacks.One of the most serious vulnerabilities, CVE-2024-8932, allows for out-of-bounds (OOB) access in the ldap_escape function. This vulnerability, with a CVSS score of 9.8, could enable attackers to execute arbitrary code on affected systems.

Read More


thumb-image

Solutions