CVE-2024-8929 - CERT CVE
ID CVE-2024-8929
Sažetak In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.
Reference
CVSS
Base: 5.8
Impact: 4.0
Exploitability:1.3
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH NONE NONE
CVSS vektor CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Zadnje važnije ažuriranje 22-11-2024 - 07:15
Objavljeno 22-11-2024 - 07:15