Boletines de Vulnerabilidades

MSA-23-0040: Make file serving endpoints revision control stricter


Información sobre el sistema

   
Software afectado PHP

Descripción

por Michael Hawkins. Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.Severity/Risk:MinorVersions affected:4.2 to 4.2.2, 4.1 to 4.1.5, 4.0 to 4.0.10, 3.11 to 3.11.16, 3.9 to 3.9.23 and earlier unsupported versionsVersions fixed:4.2.3, 4.1.6, 4.0.11, 3.11.17 and 3.9.24Reported by:Yaniv Nizry (SonarSource)CVE identifier:CVE-2023-5548Changes

More info:

https://moodle.org/mod/forum/discuss.php?d=451589&parent=1814897

Identificadores estándar

Propiedad Valor
CVE CVE-2023-5548.

Histórico de versiones

Versión Comentario Fecha

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT