In PHP version 8.1.* before 8.1.28,... CVE-2024-3096
-
AV
AC
AU
C
I
A
发布：
2024-04-29
修订：
2025-02-13
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有0条受影响产品信息
