9.8

CVE-2017-9841

Warnung
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpunit Project ≫ Phpunit Version <= 4.8.27
Phpunit Project ≫ Phpunit Version >= 5.0.0 < 5.6.3
Oracle ≫ Communications Diameter Signaling Router Version >= 8.0.0 <= 8.5.0

15.02.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

PHPUnit Command Injection Vulnerability

Schwachstelle

PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 100% 1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://www.oracle.com/security-alerts/cpuoct2021.html
Patch
Third Party Advisory
http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com/
Third Party Advisory
http://www.securityfocus.com/bid/101798
Broken Link
http://www.securitytracker.com/id/1039812
Broken Link
https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a5
Patch
Third Party Advisory
https://github.com/sebastianbergmann/phpunit/pull/1956
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201711-15
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9841
US Government Resource