9.8
CVE-2015-8980
- EPSS 4.55%
- Published 04.11.2019 21:15:11
- Last modified 21.11.2024 02:39:35
- Source security@debian.org
- Teams watchlist Login
- Open Login
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.
Data is provided by the National Vulnerability Database (NVD)
Php-gettext Project ≫ Php-gettext Version < 1.0.12
Redhat ≫ Enterprise Linux Version5.0
Fedoraproject ≫ Fedora Version24
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.55% | 0.882 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.