CVE-2022-31629

6.5

MEDIUMCVSS v3

Published

September 28, 2022

Affected

11 projects

Assigned by

[email protected]

Severity scale

010

Description

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

@now/php

NPM

>= 8.1.0, < 8.1.11, >= 8.0.0, < 8.0.24, < 7.4.31NVD

@lezer/php

NPMLezer-based PHP grammar

>= 8.1.0, < 8.1.11, >= 8.0.0, < 8.0.24, < 7.4.31NVD

lezer-parser/php

GitHubPHP grammar for Lezer.

More on this CVE

NVD↗GitHub Advisory↗

>= 8.1.0, < 8.1.11, >= 8.0.0, < 8.0.24, < 7.4.31NVD

php

Crates.ioRust bindings for the PHP runtime

>= 8.1.0, < 8.1.11, >= 8.0.0, < 8.0.24, < 7.4.31NVD

php

NPMAllows you to run PHP code in Node.js in various ways.

>= 8.1.0, < 8.1.11, >= 8.0.0, < 8.0.24, < 7.4.31NVD

php

Python Package IndexHandle some of the strange standards in PHP projects

>= 8.1.0, < 8.1.11, >= 8.0.0, < 8.0.24, < 7.4.31NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 35, = 36, = 37NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 35, = 36, = 37NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 35, = 36, = 37NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 35, = 36, = 37NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 35, = 36, = 37NVD

Security Advisories

CVE-2022-31629

Description

More on this CVE