Threats tagged 'bit-php-2024-3096'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 1.5%	CVE-2024-3096PHP · Improper Input Validation Medium6.5EPSS 1.5%2024-05-14CVE Database V5CVE-2024-3096 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. EPSS 1.5%Vulnerability PHP Group #cwe-20 #bit-php-2024-3096 #bitnami	CVE Database V5	2024-05-14

Page 1 of 1