by Kastro
Paper/Archive/CVE-2022-31631

CVE-2022-31631

PHP Group PHP — PDO::quote() may return unquoted string

EPSS 2%public exploitCVSS 9.1
critical.is priorityof 100
54
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 82.4.824 × 2016.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

Affected

ProductAffectedFixed inSource
PHP8.0.x – < 8.0.278.0.27CNA
PHP8.1.x – < 8.1.158.1.15CNA
PHP8.2.x – < 8.2.28.2.2CNA

Scores by source

php (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitbugs.php.net/bug.php?id=81740refsecurity.netapp.com/advisory/ntap-20230223-0007