Beveiligingsadvies

CVE-2020-7062

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-02-27 20:25:15

Laatst bijgewerkt 2024-09-16 22:24:49

Toegewezen door php

CVSS-score 7.5

Status PUBLISHED

Beschrijving

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.

← Alle CVE's bekijken Bekijk op cve.org ↗