Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Insufficient Verification of Data Authenticity Vulnerability - CVE-2024-5458 - Vulnerability Database
PHP

PHP Insufficient Verification of Data Authenticity Vulnerability - CVE-2024-5458

Medium
Reference: CVE-2024-5458
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-5458
Title: PHP Insufficient Verification of Data Authenticity Vulnerability
Overview:

In PHP versions8.1. before 8.1.29 8.2. before 8.2.20 8.3. before 8.3.8 due to a code logic error filtering functions such as filter_var when validating URLs(FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.