CVE-2018-10547

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-10547
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-10547.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-10547
Downstream
Related
Published
2018-04-29T21:29:00.400Z
Modified
2026-02-03T06:59:40.338869Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-5712.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
0221e9f827632942225586687a33cfd554860d5e
Fixed
0f3897573515b7aca3e5425d77baee14fe33edd4
Introduced
60fffd296abce5fc071f3c173c25a2696cf683c6
Fixed
3d5d1e569e8c35fb600801d96fb66a3458808381
Fixed
405e6b5c683c733043d16fee98d97d1596ccfb8f
Introduced
8148cbb78841c8ec0759c0836e7f35dec799d300
Fixed
ba2fe0c96bee278ed1b1b715b52b70a316135995

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-10547.json"