CVE-2018-5712

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.33 PHP versions 7.0.x prior to 7.0.27 PHP versions 7.1.x prior to 7.1.13 PHP versions 7.2.x prior to 7.2.1

Description The issue is related to Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file. This occurs due to insufficient protection measures for the web page structure, allowing a remote attacker to perform cross-site scripting attacks.

Recommendations For PHP versions prior to 5.6.33, update to version 5.6.33 or later. For PHP versions 7.0.x prior to 7.0.27, update to version 7.0.27 or later. For PHP versions 7.1.x prior to 7.1.13, update to version 7.1.13 or later. For PHP versions 7.2.x prior to 7.2.1, update to version 7.2.1 or later.