CVE-2024-4577

Medium

Open

KEV

TLP:CLEAR

PHP-CGI OS Command Injection Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

PHP Group — PHP — PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.

Details

EPSS Score ⓘ: 99.99%

100th percentile
Confidence: 100%
CISA KEV
Date Added: Jun 12, 2024
Patch Due: Jul 3, 2024
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.