CVE-2022-31628

Publication date

2022-09-28 22:25:09

Family

php

State

PUBLISHED

Description

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.