CVE-2018-17082

MEDIUM NUCLEI

PHP <5.6.38, <7.0.32, <7.1.22, <7.2.10 - XSS

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2018-17082 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.

Nuclei Templates (1)

Apache2 - Transfer-Encoding Chunked XSS
MEDIUMby DhiyaneshDK

References (10)

Core 10
Core References
Release Notes x_refsource_misc
http://php.net/ChangeLog-5.php
Release Notes x_refsource_misc
http://php.net/ChangeLog-7.php
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4353
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/09/msg00020.html
Exploit, Issue Tracking, Vendor Advisory x_refsource_misc
https://bugs.php.net/bug.php?id=76582
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201812-01
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20180924-0001/
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:2519
Third Party Advisory x_refsource_confirm
https://www.tenable.com/security/tns-2019-07

Scores

CVSS v3 6.1
EPSS 0.0410
EPSS Percentile 89.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (4)
debian/debian_linux 8.0
debian/debian_linux 9.0
netapp/storage_automation_store
php/php < 5.6.38
Published Sep 16, 2018
Tracked Since Feb 18, 2026