VDB

GCVE-110-MAGEIA-2021-25

GCVE-110-MAGEIA-2021-25
Advisory Published
Vulnetix · Advisory published January 14, 2021
FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071). stream_get_contents() fails with maxlength=-1 or default. See upstream releasenotes for other changes.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiagitolite0 (affected), 3.6.11-1.1.mga7 (unaffected)—
Mageiaphp7.3.26-1.mga7 (unaffected), 7.3.26-1.mga7 (unaffected), 0 (affected), 0 (affected)—

Aliases

CVE-2020-7071

References

Updated php packages fix security vulnerability
advisory
Updated php packages fix security vulnerability
issue
Updated php packages fix security vulnerability
issue
Updated gitolite package fixes dependencies
advisory
Updated gitolite package fixes dependencies
issue

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›