Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2022-31629
Description:In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
Test IDs: 1.3.6.1.4.1.25623.1.1.10.2024.0132   1.3.6.1.4.1.25623.1.0.856108   1.3.6.1.4.1.25623.1.0.886595   1.3.6.1.4.1.25623.1.1.4.2024.2037.1   1.3.6.1.4.1.25623.1.1.13.2024.103.01   1.3.6.1.4.1.25623.1.0.856106   1.3.6.1.4.1.25623.1.0.886756  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-31629
Debian Security Information: DSA-5277 (Google Search)
https://www.debian.org/security/2022/dsa-5277
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNIEABBH5XCXLFWWZYIDE457SPEDZTXV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VI3E6A3ZTH2RP7OMLJHSVFIEQBIFM6RF/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2L5SUVYGAKSWODUQPZFBUB3AL6E6CSEV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LSJVPJTX7T3J5V7XHR4MFNHZGP44R5XE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/
https://security.gentoo.org/glsa/202211-03
https://bugs.php.net/bug.php?id=81727
https://bugs.php.net/bug.php?id=81727
https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html
http://www.openwall.com/lists/oss-security/2024/04/12/11




© 1998-2025 E-Soft Inc. All rights reserved.