Back to search
CVE-2022-31629
Published: Sep 28, 2022
Modified: Nov 4, 2025
PUBLISHED
Description
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
| Vendor | Product | Versions |
|---|---|---|
PHP Group | PHP | affected 7.4.X - < 7.4.31affected 8.0.X - < 8.0.24affected 8.1.X - < 8.1.11 |
Weaknesses (CWE)
References
FEDORA-2022-0b77fbd9e7
vendor-advisory
FEDORA-2022-afdea1c747
vendor-advisory
FEDORA-2022-f204e1d0ed
vendor-advisory
DSA-5277
vendor-advisory
GLSA-202211-03
vendor-advisory
FEDORA-2024-b46619f761
vendor-advisory
FEDORA-2024-39d50cc975
vendor-advisory
FEDORA-2024-5e8ae0def0
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now