VDB
WID-SEC-W-2023-2719
WID-SEC-W-2023-2719
PUBLISHED
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um einen Server Side Request Forgery (SSRF) durchzuführen, vertrauliche Daten einzusehen oder Code zur Ausführung zu bringen.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Enterprise Linux | ||
| Ubuntu Linux | ||
| 11 | ||
| Amazon Linux 2 | ||
| Open Source PHP | ||
| SUSE Linux |
Timeline
- Jun 18, 2017 CVE Published
- Apr 16, 2025 CVE Updated
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
References
- https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2023-2719.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2719 advisory
- http://www.ubuntu.com/usn/usn-3382-2/ url
- https://alas.aws.amazon.com/AL2/ALAS-2025-2832.html url
- https://www.suse.com/support/update/announcement/2017/suse-su-20171585-1/ url
- https://www.suse.com/support/update/announcement/2017/suse-su-20171662-1.html url
- https://www.suse.com/support/update/announcement/2017/suse-su-20171709-1.html url
- https://www.suse.com/support/update/announcement/2017/suse-su-20171717-1.html url
- http://www.ubuntu.com/usn/usn-3382-1/ url
- https://security.netapp.com/advisory/ntap-20180112-0001/ url
- https://access.redhat.com/errata/RHSA-2018:1296 url
- https://alas.aws.amazon.com/AL2/ALAS-2023-2311.html url
- https://alas.aws.amazon.com/AL2/ALAS-2024-2520.html url