Total vulnerabilities in the database
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
| Software | From | Fixed in |
|---|---|---|
| php / php | 8.1.0 | 8.1.11 |
| php / php | 8.0.0 | 8.0.24 |
| php / php | - | 7.4.31 |
| fedoraproject / fedora | 35 | 35.x |
| fedoraproject / fedora | 36 | 36.x |
| fedoraproject / fedora | 37 | 37.x |
| debian / debian_linux | 10.0 | 10.0.x |
| debian / debian_linux | 11.0 | 11.0.x |