CVE-2018-10547

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.36 PHP versions 7.0.x prior to 7.0.30 PHP versions 7.1.x prior to 7.1.17 PHP versions 7.2.x prior to 7.2.5

Description The issue is related to Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. This occurs due to an incomplete fix for a previous issue, allowing a remote attacker to perform cross-site scripting attacks.

Recommendations For PHP versions prior to 5.6.36, update to version 5.6.36 or later. For PHP versions 7.0.x prior to 7.0.30, update to version 7.0.30 or later. For PHP versions 7.1.x prior to 7.1.17, update to version 7.1.17 or later. For PHP versions 7.2.x prior to 7.2.5, update to version 7.2.5 or later.