blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2023-0662

HIGH 7.5 CVSS 3.1
Published
February 16, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
security@php.net
Weakness
CWE-400
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

Affected products and versions

  • PHP — From 8.0.0 (including) to 8.0.28 (excluding)
  • PHP — From 8.1.0 (including) to 8.1.16 (excluding)
  • PHP — From 8.2.0 (including) to 8.2.3 (excluding)

References

  • github.com https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv Third Party Advisory
  • security.netapp.com https://security.netapp.com/advisory/ntap-20230517-0001/
  • nvd.nist.gov Official NVD record