Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Other Vulnerability - CVE-2020-7066 - Vulnerability Database
PHP

PHP Other Vulnerability - CVE-2020-7066

Medium
Reference: CVE-2020-7066
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-7066
Title: PHP Other Vulnerability
Overview:

In PHP versions 7.2.x below 7.2.29 7.3.x below 7.3.16 and 7.4.x below 7.4.4 while using get_headers() with user-supplied URL if the URL contains zero (0) character the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the get_headers() and possibly send some information to a wrong server.