CVE-2024-8928

php: Erroneous parsing of multipart form data

Published n/a CVSS 3.1 · 3.1 Low EPSS n/a KEV · Not listed

Description

A flaw was found in PHP. Erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed, violating data integrity.

Affected Products

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2024-8928
https://www.cve.org/CVERecord?id=CVE-2024-8928

History

Oct 10, 2024 2:30 AM Description updated View changes

Type	Values Removed	Values Added
Description	No description is available for this CVE.	A flaw was found in PHP. Erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed, violating data integrity.

Oct 9, 2024 1:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		No description is available for this CVE.
Title		php: Erroneous parsing of multipart form data
Weaknesses		CWE-1286
References		https://nvd.nist.gov/vuln/detail/CVE-2024-8928 https://www.cve.org/CVERecord?id=CVE-2024-8928
Metrics	threat_severity `None`	cvssV3_1 `{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N'}` threat_severity `Low`