CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1–1 of 1 advisories (Page 1/1)
2017-06-27
PHPUnit Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2017-9841)
[Affected Scope] PHPUnit versions before 4.8.28 and 5.x versions before 5.6.3
[Impact] Remote attackers can execute arbitrary PHP code and compromise the underlying server by accessing the exposed /vendor directory
[Mitigation] Upgrade PHPUnit to a secure version and restrict external HTTP access to the /vendor directory via web server configuration