Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability - CVE-2022-31628 - Vulnerability Database
PHP

PHP Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability - CVE-2022-31628

Medium
Reference: CVE-2022-31628
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-31628
Title: PHP Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
Overview:

In PHP versions before 7.4.31 8.0.24 and 8.1.11 the phar uncompressor code would recursively uncompress quotquinesquot gzip files resulting in an infinite loop.