CVE-2018-17082
MEDIUM NUCLEIPHP <5.6.38, <7.0.32, <7.1.22, <7.2.10 - XSS
Title source: llmDescription
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.
Nuclei Templates (1)
Apache2 - Transfer-Encoding Chunked XSS
MEDIUMby DhiyaneshDK
Scores
CVSS v3
6.1
EPSS
0.0824
EPSS Percentile
92.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (4)
debian/debian_linux
8.0
debian/debian_linux
9.0
netapp/storage_automation_store
php/php
< 5.6.38
Published
Sep 16, 2018
Tracked Since
Feb 18, 2026