Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2018-17082 PUBLISHED CVSS 6.099999904632568 MEDIUM

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.

Risk Scores

CVSS v3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Alpine:v3.5php50, 5.2.10-r0, 5.2.10-r2

Timeline

References

Open in Interactive Console →