Description

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.

Remediation

References

CVE-2018-5712

Related Vulnerabilities

Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2017-7659)

WordPress Improper Privilege Management Vulnerability (CVE-2020-28035)

Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-6816)

Nexus Repository Manager Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') Vulnerability (CVE-2018-16621)

WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.0.69)

Severity

Medium

Classification

CVE-2018-5712 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities